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Users must demand better legacy tools. PAGE 26 = Career growth: Ask your peers to assess your skills. PAGE 54 
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Fake listings, lack of 
vetting undermine UDDI 


BY LEE COPELAND GLADWIN 
A major 
build 


Web services for 


industry effort to 
an online 
business is 
riddled with embarrassing se- 
curity problems that 
marred its arrival. 

Last month’s launch of the 
Universal Description, Discov- 
ery and Integration directory, 
a Yellow Pages-style directory 
that lets 
their Internet services and ca- 


have 


businesses register 


pabilities online, was intended 


to drive support for Web ser- 


vices. But lax security by 


UDDI founders IBM and Mi- | 


crosoft Corp. has permitted 
the Web-based directory to be 
populated with fake firms, 
false links and uninformed 
participants. 
For example, 
ers Inc.” 


“Loud Speak- 
is registered as a 
Mountain View, Calif.-based 
firm run by John McLoud, 
whose public speakers talk at a 
level higher than 100 decibels. 
The 
Speaker’s Web service as juju 
beads for “warding off evil 
spirits.” 
ed with directory 
and can’t be found on the Web. 

As for bad links, 


a pornography site, not a Web 
service. 


directory of 


UDDI also describes Loud | 
The company isn’t list- | 
assistance | 


the UDDI | 
listing for Oracle Corp. links to | 


| used by federal agencies 
UDDI, page 12 | 


TREATS 


FACED WITH A USER REVOLT AND FIERCE 
competition from IBM, Oracle last week cut 


prices on its database software by ditching its 


high-priced “power-unit” licensing model. 


Database Customer 
Satisfaction a 
i 


£ BM 

2. Microsoft 
3. Informix 
4. Sybase 
5. Oracle 


7 ae 
3. Microsoft 
4. Informix 


5. Sybase 


Customers said it was 
about time. A new 
Computerworld survey 
of 355 database users 
ranked Oracle’s data- 
base tops in product 
but dead last 
on pricing. 


features 


Stories by Dan Verton begin on page 6. 


FED ACCESS LAW 


COULD AFFECT IT 


Disabilities regulations 
go into effect this week 


wok PATRICK THIBODEAU 


WASHING N 


The federal government plans 


to usher in new regulations | 


this week that will require all 
electronic and IT equipment 
and 
departments to be accessible 
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to all government employees. 
The impact is expected to ex- 
tend to the 
well. 
Under a new law referred to 
as Sec. 508 of the Rehabilita- 
tion Act, by June 21 all elec- 
tronic products purchased by 


private sector as 


| the government, ranging from 


fax machines to enterprise 
software, must be accessible to 
people with disabilities, with 
some limited exceptions. 

For federal agencies, the law 
has prompted systems reviews 


reminiscent of Y2k projects, | 


and with some of the cost. For 
example, the Environmental 
Protection Agency’s Enviro- 
facts Web site, which provides 
environmental data, estimates 
that the cost of complying with 
the law is $125,000, according 

Jerry Carrillo, who is re- 
sponsible for coordinating the 


| EPA’s Sec. 508 initiative. 


Access Law, page 61 


SWITCHING FROM ORACLE to Microsoft's SQL Server saved 
Smead Manufacturing about $4 million, says Joseph Vossen, vice 


president of information systems. 


HOUSTON FLOOD TESTS TECH PLANNING 


Government, health care 
sectors learn lessons 
BY TODD R. WEISS 
As rains from Tropical Storm 
Allison inundated the Houston 
area early last week, corporate 
IT departments scrambled to 
restore computer systems and 
communications in 
buildings 
town. 

While no disas- 
ter recovery plan was water- 
proof, IT operations in the 
health and government 
sectors appeared to be particu- 
larly hard hit. 

For example, at the Texas 
Medical Center campus, where 
hospitals lost power, manage- 
ment learned that IT employ- 
ees should have been included 


care 


down- he 
har 


members of 
command center, 
said Ken Mattox, chief of staff 
at Ben Taub Hospital, one of 
about 54 medical 


is integral 
emergency 


the 


institutions 
on the campus. 

“If I knew this was coming 
all over again, I would get a 
bunch of wire-pullers and an 
IT person in 

center very ea 
said. “Once 


dware starts 


the command 


Ing kaflooey, 
takes a little time to get it bac} 
up to speed.” 

Another problem revealed 
during the storm was 
pitals across the city have dif- 
ferent data file formats, often 
making it impossible to 
p itient elec 
Mattox That 


Flooding, page 16 


-cords 


change 


tronically, said. 








WE DIDN’T JUST JUMP ON THE 
INFRASTRUCTURE BANDWAGON. 
WE BUILT IT. 
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IT’S TIME TO SET THE RECORD STRAIGHT. 


LONG BEFORE OUR COMPETITORS EVEN ADDED THE WORD “INFRASTRUCTURE” 
TO THEIR VOCABULARY, WE WERE BUSY CREATING IT. SINCE WE FIRST LAUNCHED 
UNICENTER; IT HAS BECOME THE DE FACTO GLOBAL STANDARD FOR MANAGING 
ALL eBUSINESS INFRASTRUCTURE. BUT WE DIDN’T STOP THERE—WE’RE ALSO 
THE WORLD LEADER IN SECURITY AND STORAGE SOFTWARE. EVERY DAY, OUR 
SOFTWARE HANDLES OVER 180 MILLION TRANSACTIONS, PROTECTS $50 BILLION 
IN WIRE TRANSFERS AND STORES 40 MILLION SECURITY EXCHANGES. EXPERTISE 
DOESN’T HAPPEN OVERNIGHT. IT’S TAKEN 25 YEARS OF HARD WORK AND 
LEADERSHIP TO GET TO BE THE BEST. SO WHEN WE SAY YOU CAN TRUST EVERY 
ONE OF OUR 18,000 EMPLOYEES AROUND THE WORLD TO DELIVER THE SOFTWARE 


AND SERVICE THAT YOUR eBUSINESS‘ SUCCESS DEPENDS ON, WE REALLY MEAN IT. 


Computer Associates™ 


HELLO TOMORROW | WE ARE COMPUTER ASSOCIATE 





SHARPEN YOUR DATA WAREHOUSE PERFORMANCE. 


Want cutting edge ways to improve data warehouse performance? Turn to Syncsort’s multi-purpose tool kit. 
It starts with SyncSort, the world’s leading high-performance, multi-platform data manipulation and ETL 
(extract, transform and load) product for over 30 years. SyncSort cleans and sorts raw data, speeding data 
loading by up to 90%. Visual SyncSort combines the robust performance of SyncSort with the ease of a 
Windows-based drag-and-drop GUI. Sigma, a specialized data-aggregate engine, accelerates processing 
and query speed by up to 25% and makes an excellent complement to SyncSort. For multi-platform 
formats, your tool is FilePort, a powerful UNIX/mainframe bi-directional data conversion utility. Finally, 
safeguard what you’ve built - with Backup Express, a flexible, distributed, enterprise-wide backup and 
restore solution that works across platforms. 


For more information on improving your data warehouse’s performance with 
the Syncsort tool kit, a FREE trial, and your FREE handy multi-tool, visit 


www.syncsort.com/61cwa or call 201-930-8200. ROTATES 
syncsort 
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GREATER HAPPINESS 
THROUGH FISH 


A management philosophy inspired 
by Seattle’s flinging fishmongers is 
making isolated IT workers more 
enthusiastic and more satisfied in 


AN ANT SHALL LEAD THEM 


The humble ant may herald a revolution 
in software design. Systems that mimic 
; ant behavior use many 
small, autonomous 
software agents that 


NEWS i 


10 Three airlines are teaming up 
with Boeing to launch airborne 
broadband Internet service on a to- 
tal of 1,500 aircraft next year. 


10 Certicom releases new en- 
cryption technology for Palm 
handhelds. 


14 Small, targeted projects are 
more successful than corporate sea 
changes, say e-business leaders in 


the chemical industry. 


14 3Com releases new products 
for building and enhancing net- 
works as ammunition in the com- 
pany’s battle with goliaths Cisco 
and Nortel 


21 Struggling business applica- 
tions vendor J.D. Edwards shines 
the spotlight on collaborative com- 
merce technology as the company 


tries to reverse declining sales. 
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BUSINESS = 29 


30 Workstyles: It workers at 
DreamWorks enjoy plenty of 
Hollywood perks, but the job also 
comes with some unique chal 


lenges. 


30 Ed Yourdon says mentoring 
isn’t a role IT professionals train 
for, but it can save companies mil 
lions of dollars in wasted costs and 


failed projects. 


31 Fancy front ends that connect 
to messy back-ends are gaining 
popularity in the Web age, writes 
Kevin Fogarty. But all they really 
do is add another layer to already- 
complex systems. 


32 Nurturing diversity is about 
more than just recognizing differ- 
ences in color and gender, accord- 
ing to people who work at Comput 
erworld’s Top 10 Best Places to 
Work for Diversity 


ONLINE :: yr breaking news, updated twice daily at 


sit our Web site. www.computerworld.com/latestnews 


TECHNOLOGY 41 


42 Hack of the Month: Credit 


card fraud is rampant over the 
Internet. Online merchants need to 
protect themselves, or risk being 


sunk by con artists 


44 Security Journal: A court or- 
der to allow electronic surveillance 
forces security manager Mathias 
Thurman to scramble to protect 
his company’s network. 


48 Options abound in e-com- 
merce servers that can handle 
back-end processing and integrate 
well with legacy systems. 


50 Keeping secrets has been the 

business of the information assur- 

ance director of the National Secu- 
rity Agency for 37 years. Here's his 
advice for IT organizations looking 
to protect data and systems. 


52 Emerging Companies: Autho- 
ria offers knowledge-base software 
that lets human resources staff or 
employees access personalized 
benefits information. 


together can solve 
enormously com- 
plex problems. 
PAGE 46 


Pimm Fox writes about 
best way to spend the extra IT 
ing money that companies 


should get in the next few years 


John Gantz pours doubts on 


the rationale behind IBM’s eLiza 


Alex Torralbas says a single 
legislative “junk 


piece of 
media firms strong 
over Internet-based inform 


William M. Ulrich urges IT or- 
ganizations to demand better tools 


for their legacy systems 


Frank Hayes says IT shops 
shouldn't wring their hands in glee 
as they watch the dot-coms die 
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BACK 10 SCHOOL 


In the E-Commerce Community, 
Scott Harmon tells us why he 
learned everything he needed to 
know about e-business in his high 
school chemistry lab. 
www.computerworld.com/ecommerce 


VENDOR PROBLEMS: 
YOUR PROBLEM? 


This is just one of the topics in the 
E-Commerce Discussion Forum. 
If you have thoughts about cus- 
tomer relationship management, 
the issues related to doing busi- 
ness in Europe or any other 
e-business issue, come on down 
and have your say. 
www.computerworld.com/forums 


FINDING A PRINCE 
FOR A CUSTOMER 


A princess who uses a customer 
relationship management system 
can greatly shorten her hunt for 
the prince among the frogs. David 
Rubinstein explains it all in the 
E-Commerce Community. 
www.computerworld.com/ecommerce 


HAVE AN IDEA ABOUT 
LINUX? WINDOWS? 


Head to the Operating Systems 
Forum in Computerworld’s discus- 
sion forums. Share your views on 
Linux and whether it falls short of 
the mainstream. Or tell us what 
you think about Active Directory. 
www.computerworld.com/forums 
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Oracle Scraps Unpopular 
Database Pricing Model 


Oracle Faces 
Challenges in 2s! setin ss 
Marketplace sccos.ssstne 


h as cluster 


en Ora 


IBM 


ympetitors 


BY DAN VERTON 


and Mi 
big custome! 


nomic down 


355 IT 


100 Oracle 


vey of professionals 


luding users 
portrait of 


Oracle 


nts a complex 


vendor: 53 of the 


base users said they like 


l, yet only 


uct oOveral 


said they like the vendor's 


practices overall (see chart be 


low). Specifically, the users 


said they love the product’s re 
scalability, — fe 


rformance Dut 


bandoned 


C concerns 


Sald that on Dal 


, the product is wortl 


*xpense 


Report Card for Database Vendors HIGH SCORES ARE IN BOLD. LOW SCORES ARE IN RED 


oo are the average customer satisfaction scores for five major database software vendors, based on a scale of 1 to 7, where 
7is high. Oracle ranks high in product features and performance, but low on costs. 


TELL me cL at INFORMIX | MICROSOFT | SYBASE 


Features 


Performance 5A 
Scalability 
Reliability 
Cost to purchase or license 


5.88 
6.27 
5.67 

5.18 
5.73 
5.70 


5.65 
473 
5.09 
5.43 
5.30 


Cost to operate or maintain 
Overall experience with the product 
PRODUCT AVERAGE 


512 
513 


5.45 
463 
5.30 
5.22 
5.40 


5.43 


5.39 


5.33 


SLU maa ORACLE | IBM | INFORMIX | MICROSOFT | SYBASE 


4.96 5.42 
4.24 4.78 
Technical support 5.15 5.37 
5.03 5.30 
5.09 5.45 
4.90 5.27 
5.30 5.54 


4.92 
4.59 
4.94 
483 
491 

4.82 
5.10 


Licensing structure 
Flexibility in pricing 


Customer support 

Overall experience with the vendor 
VENDOR AVERAGE 

ALL FACTORS AVERAGE 


5.06 
474 
5.06 
492 
5.06 
4.95 
5.11 


4.92 
4m 

4.67 
4.56 
4.85 
472 
5.11 


Methodology: Telephone survey of 355 IT professionals at U.S. organizations about enterprise database manage- 
ment software. Respondents included 100 Oracle, 100 IBM, 100 Microsoft, 100 Sybase and 66 Informix users. Some 
respondents answered questions about two different databases they have installed. The interviews were conducted 
by First Market Research, an independent research company in Austin, Texas, and took place from April 17 through 


May 4, 2001. 


wail | 


Vendor Reacts 
To IBM Rivalry, 
User Concern 


BY DAN VERTON 
customers and 


of Oracle Corp. have 
CEO 


Ellison for what t! 


battered Larry 


the company’s 


its flags 


illed 
pricing of 
base software. Last week, 
son hit back. 
Speaking toa packed house 
it the | 
the con 
Oracle9i database, 
Ellison 
that 
is eliminating its 


Power 


\pany’s new 


announced 
the company 
Universal 

Unit (UPU) 


ing and switching 


pric- 


to the same pric- 


ing model used by rivals IBM 
and Microsoft Corp. 

Now, of paying 
the the 
speed of the processors that 
run it, Oracle 
a flat fee of $40,000 per 
the enterprise 
database and 
standard edi- 


per-processor 


instead 
software based on 
customers will 
pay 
for 
edition of the 
$15,000 for the 
tion. Oracle’s 
pricing 
price cut for users when com- 
pared with the UPU method. 
“It’s about Tim 
Gotham, president of Oracle 
reseller Design 
tems Inc. in Minneapolis. 
“The power-unit pricing was 
unfair and ridiculous, in my 
opinion,” he added. “The new 
per-processor pricing is much 
more fair and more in line with 
the rest of the industry.” 
The change couldn’t 


processor 


also means an overall 


time,” said 


Premier Sys- 


have 


for 


Under UPU pricing, 
Oracle had the highest 
percentage of users un- 
happy with its licensing 
structure (41%); IBM 
had the lowest (19%). 


-Computerworld survey 


| 
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come at a better time for the 
software developer 

In a major survey of 355 data- 
base users and in separate in 
terviews with 30 Oracle custo- 
mers last month, Computer 
world found that when it came 
, many users ranked Or 
last behind 


formix Soft 


to price 
acle dead rivals 
IBM, Mic 
ware (recently 
IBM) and 

Ellison said in 
that he 


rosoft, In 
purchased by 
Sybase Inc. 

an interview 
the 


to user con- 


last week made 


move in response 
IBM’s 
Now 


nies will have the same pricing 


marketing 
both 


and 


cerns 
challenge compa 
model, making it easier to com- 
pare prices, he said. 
“Every 


year, we 


lower our prices, 


and we sell more 
software,” Ellison 
said. “This is, in 
fact, 


tion 


a price reduc- 
from [the 
power-unit mod- 


figurations ac- 


For some con- 


cording to figures posted at 
Oracle’s online store, the new 
per-processor scheme will cut 
prices by 15% to 18%, compared 
with the UPU approach. 
Although Oracle’s 
cessor pricing is still twice as 
IBM’s, Ellison 


a good reason for 


per-pro- 


expensive as 
said there’s 
that: Oracle9i comes out of the 
box with more features than 
IBM’s DB2. Once users start 
adding in the cost of features 
IBM charges extra for, he 
claimed, “they’re actually more 
expensive than we are.” 

Many users interviewed said 
that Oracle’s previous sticker 
prices were becoming harder 


| and harder to justify to senior 


business executives. 

“When upper management 
is shown a budget difference of 
$150,000 for the same project 
based on the database used, 
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o. in , in Oi offers a much lower TC( 


JOSEPH VOSSEN, vice pres- 
ident of information systems 
at Smead Manufacturing, 


vestigated the cost to upgrade | than competitors’ products do, 


his existing Unix-based Oracle | but users are split or 


To his 


says he was a “Unix/Oracle 


do you think 
asked 


Steve Lutz, who runs six Web 


which database 
we are going to use?” 
sites for Infonautics Corp. in 
King of Prussia, Pa. His compa- 
ny has considered moving to 
another vendor because of Or- 
acle’s pricing, he said. 
Computerworld’s 
which 100 
users, found that a whopping 


74% of Oracle users considered 


survey, 


included Oracle 


the cost to install 
and run the firm’s 
database = “fairly 
high” or 
high” — a 
larger 
than for other ven- 
dors. (IBM’s figure 
was 38%, for exam- 
ple.) The 
was conducted in April and 
May, before the company made 
its Oracle9i and pricing an- 


“very 
much 


percentage 


survey 


nouncements. 

“Pricing is one of the most 
important and difficult prob- 
lems facing Oracle today,” said 
James Governor, an analyst at 
Illuminata Inc. in Nashua, N.H. 
“There must be a connection” 


between the company’s recent | 


More than three 
quarters of the Oracle 
users said that even 
though the database 
is costly, it’s worth 
the expense. 
-Computerworld survey 


| 


earnings disappointment and 


its premium pricing, he added. 

On March 15, Oracle report- 
ed a database license growth 
for the third 
quarter, far less than its origi- 


rate of a mere 6% 


nal prediction of a 20% in- 
crease. Ellison blamed the dip 
on users delaying IT purchases 
because of the overall econom- 
ic slowdown, but analysts and 
users quickly pointed their fin- 
gers at exorbitant 

pricing [Page One, 
March 19]. 
Oracle officials 
previously defend- 
ed the UPL 
as more equitable 


model 
for users, saying 
that 


charge 


competitors 
users for 
processors 
whether those processors are 
running the database software. 
But many users said Oracle’s 
UPU pricing model was still 
too high and that it forced 
them to delay or even cancel 
orders for database software. 
Last year, Joseph 
vice president of information 
systems at Smead Manufactur- 


Vossen, 


regardless of 


database « ronment 


surprise, the self-described 
“Unix/Oracle bigot” soon real- 
he was looking at a 


tag for the Or- 


ized that 
$6 million price 
acle upgrade — enough to pay 
the salaries of his 10-person 
staff for three years 


good 


“Oracle is a product, 
but [with Microsoft SQL Serv- 

> were looking at saving 
somewhere in the $4 million 
three years,” said 


range Ove! 


Vossen, who suffered the loss 
of all of his Oracle database ad- 
ministrators after he  an- 
nounced plans to switch to 
SQL Server. “With the [pric- 
ing] models [Oracle was] pre 
senting to us, we don’t believe 
they could have «ome close.” 
Chuck Hamilton, 
dministrator at West 
retailer 
said his firm evaluat 


an Oracle 
database a 
Chester, P 
QVC Inc., 
ed database software from Or- 

IBM Microsoft. Al- 
though each well 


enougn 


a.-based 


acle, and 


performed 
to win the sale, Ora- 
cle’s pricing came in five times 
higher than the others’, under 
the UPU n 


Our developers, who previ 


he said. 


ously were Microsoft fans, were 
so happy with the performance 
achieved by Oracle on several 
recent projects that they wanted 
to go with Oracle for all future 
Hamilton said. “But 
much nailed 


projects,” 
that UPI 
the coffin shut on Oracle.’ 

That has been music to the 


pretty 


ears of Oracle’s competitors, 
particularly Sybase. “Last year, 
my database business 
16%, and I have Oracle to thank 
for it,” said CEO John Chen. 
Jacqueline Woods, Oracle’s 
vice president of global prac- 


grew 


tices, contended that pricing 
wasn't a big issue until recently 
because users understood that 
Oracle’s database has a lower 
total cost of ownership (TCO) 
than those of its rivals. 

[he flap over pricing, she 
said, is really the result of a 
carefully orchestrated cam- 
paign by Oracle’s competitors, 
which have ignored the addi- 
tional development and inte- 
gration costs associated with 
their own database software. 

Oracle maintains that Ora- 


sales pitch 
“We have 
[database 


for all kinds of different 


cations, [but] Oracle, for one, is 


| 


too expensive,” Sald 


Hamer, a database administra 


How Oracle's 
Pricing Stacks Up 


The Pricing Models 


Per processor 

Per processor: 

Named user (single server) 
Named user (multiserver): 


Per processor 
Per processor (clustered): 


Per processor 
Per concurrent user 


Per processor 


Per seat/client (one server plus 25 client access devices) 


Version upgrade 


Per NT server (with >4 processors) 


Per Unix server (with > 4 processors) 


How It Adds Up 


$40,000 (Enterprise Edition) 
$15,000 (Standard Edition) 


$600 x minimum number of named users 
$750 x minimum number of named users 


$17, 500 
$22,500 


$46,000 
$1,800 


$19,999 
$11,099 
$5,549 


$995 + $195 per network seat 
$3,995 + $795 per seat 


Calculated using the vendors’ pricing models, for a capacity-based Enterprise 
Edition license (support/updates not included). Oracle's “old” pric cu- 
lated using the Universal Power Unit (UPU) model, with a volume discount. 


re Ue ie Ha CONFIGURATION NO. 2: 


Two Windows NT servers, each with 
four 700-MHz Intel processors 


Oracle8i/9i: New $320,000 
Oracle8i/9i: Old $392,000 
Informix IDS: $368,000 
Microsoft SQL 

Server 2000: $159,992 
IBM DB2 (clustered): $180,000 


Sybase Adaptive 
Server Enterprise 12: $38,455* 


*To compare Oracle's UPU pricing 

to Sybase pricing, the number of Sybase 
users was calculated using Oracle's 
minimum number of required named 
users for the configuration. which 

is 187. 


One enterprise Unix server with 
eight 450-MHz RISC processors 


Oracle8i/9i: New $320,000 
Oracle8i/9i: Olid $378,000 
Informix IDS: $368,000 
Microsoft: Not applicable 
IBM DB2 (clustered): $180,000 
Sybase: $88,265** 


** To compare Oracle’s UPU pricing 
to Sybase pricing, the number of 
Sybase users was calculated using 
Oracle's minimum number of required 
named users for the configuration, 
which is 106 
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: 


Pricin 


( 
to 


e 1m 
presi 


n Oracle 
Iselin, N.]J., 


ts, Oracle’s TCO isn't 
build using Oracle soft 
because I build systems 
the least total 


Dor 


amount of 


o. le” 4 
ising Or le, Said 


of the Two-thirds of the users 
of Oracle and IBM 
databases said they 
have too much 
invested to switch 7 
to another vendor. ane 
Computerworid survey 


New York Oracle 


Users Group Inc 
The additional in 
tegration work 
needed with data- 
bases from other 
vendors, such as 
IBM, significantly 
increases the total cost of the 
system, he said 

But for some users, the Ora 
cle sticker shock was too much 
Judith Gorman, 
CEO of Stamford, Conn. 
Inc., an 
clearinghouse of medical sta 


Last year 
based 
Medigenesis online 


tistics, chose Oracle8i as the 
database to help her start-up 
get off the ground. 

But then the price tag for a 
Unix-based Oracle database 
infrastructure came in at more 
than $1 million, including a 
$117,000 license fee. That was 
untenable for a start-up, so she 
switched to Microsoft. 

“Quite literally, we would not 
exist if we had not had the Mi 
crosoft option,” said Gorman, 


who chose SQL Server even 
though it was still a beta prod- 
uct at the time. “Oracle would 
have bankrupted us before we 
even made it to hard launch.” 
Betsy Burton, an analyst at 
Stamford, 


Conn.-based Gart- 


ner Inc. and a longtime critic of 


UPU pricing, applauded Elli 
son’s decision to abandon the 
power-unit model. “Now Ora- 
is listening to its custo- 
mers,” Burton said. She added 
that users who bought databas- 
es under the UPU scheme 
should contact Oracle “imme- 
diately to renegotiate their 
contracts.” D 


cie 


NEWS 


from page 6 


Overview 


“Oracle is still the outright 


leader in the space, with an 


excellent product,” said James 
Governor, an analyst at I]lumi 
Nashua, N.H.-based 


“[Oracle9i] 


nata Inc., z 
consultancy will 
raise the bar again in terms of 
ind resilience 


“Oracle 


scalability 
Many 
has put things into the data 


users agree 


that substantially 
proved the performance and 
scalability of Web 
tions,” said 
Niemiec, 
of the International 


base im 
applica 
Rich 


president 


Oracle Users Group 

Americas, based 
in Chicago. “This 
them a 
advan- 
tage over competi 
the data- 


also giving 


tre 
mendous 
tors on 


base side while 
current Oracle customers com 
pelling reasons to upgrade.” 

In fact, Oracle officials bris- 
tle at the notion that they have 
at all 


Jacqueline 


any competition in the 


database arena. 
Woods, Oracle’s vice president 


} 


of global practices, said the 


company’s new message is 
simple: Oracle9i’s technology 


innovation, performance, ease 


of integration and total cost of 


ownership will prove to be the 
winning combination. 
However, after a slow third 
quarter that saw database li- 
cense revenue grow a mere 6% 
far less than the 20% 
lysts had predicted 


ana- 
Oracle’s 
database sales could be slow- 
ing down again. 

Wendell Laidley, an analyst 
in Credit Suisse First Boston's 
technology group in San Fran- 
cisco, said early forecasts for 
the fourth quarter predict that 
database sales could drop as 
much as 10% year over year, 
mostly because of the sluggish 
economy. 

Plus, some customers may 
simply wait a while before up- 
grading, although Oracle ex- 
pects a record adoption rate. 

“Most of my customers have 
barely migrated to Oracle8, let 
alone Oracle8i,” said Tim 
Gotham, president of Oracle 


reseller Premier Design Sys 
All 


rule 


tems Inc. in Minneapolis 


of my customers have a 


that any Oracle database ver 
sion must be in the market a 
minimum of six to 12 months 
before they would consider 
putting a production system on 
that version.” 

The bottom line is that “the 
[database] market-share wars 
far 
Burton, an analyst at 
Gartner Inc. 


ford, 


are from over,” said Betsy 
in Stam 
Conn. Even 
with more attractive 
pricing from Oracle, 
don’t count IBM out, 
she said com/oracle 
Gartner recently 
reported that Oracle held o1 
to the No. | position last year 
market 


with a 33.8% share 


worldwide for database man 
agement software, based on li 


IBM is 


points 


censing revenue. Sut 


just a few percentage 
behind at 30.19 

And cap 
tured the 
overall database market, in the 
Win 
dows NT portion of that mar 


Microsoft 
than 15 of 


while 


less 


fierce battle over the 


ket, the company managed to 


surpass Oracle, with a 38% 


WOREDTNE 


www.computerworld. 


share, Gartner reported 
Mi- 
crosoft coup, Burton said, the 


Despite this apparent 


real technology contest these 


between Oracle and 
IBM’s DB2. 


Oracle and IBM can continue 


days 1s 


to fight it out over software fea- 
tures, but not every user wants 
every possible feature, noted 
Carl Olofson, an analyst at ID¢ 
in Framingham, Mass. “It’s hard 
the 


technological leader 


to say who is 
in this market, since 
it depends on what 
value and how 
want it deliv- 
ered,” Olofson said. 


you 
1 Wet 


you 


Computerworld’s 


survey results bear that out. 
Although Oracle scored high 
IBM Mi- 
crosoft in the categories of re- 
liability, scalability per- 
formance, IBM was the clear 


favorite in 


er than both and 


and 
terms of users’ 
overall experience and satis- 
faction. Microsoft fared better 
than both Oracle and IBM in 
terms of the cost to operate 
and maintain the database. 
Microsoft’s SQL Server has 
improved 


dramatically over 


the years, but analysts said the 


Ellison Responds 
‘Io Users, IBM 


Computerworld's Dan Verton spoke 
with Oracle CEO Larry Ellison at the 
Redwood Shores, Calif., event at which 
Oracle9i and the company's new 
pricing program were announced 


Q: Is your move away from 
power-unit pricing an attempt 
to counter IBM or respond to 
users? 

A: | think it's both. Our pricing was 
designed to make it as easy as poss: 
ble to compare our pricing to IBM's 
pricing. IBM wants to compare 
prices. Let's compare prices 


Q: When you moved to Uni- 
versal Power Unit pricing, you 
claimed it was to streamline 
pricing and make it more 
equitable for all users. Do you 
feel that by abandoning that 
approach in favor of per-pro- 
cessor pricing, you're main- 


: ing? We'll give you 
: processor-based pricing. 


taining that equitable, stream- 
lined pricing approach? 

A: IBM has made such a big stink 
about this. | keep read 

ing in the newspaper 

about how we're four, 

five and six times more 

expensive, and that's 

just preposterous. The 

only issue that IBM has 


: is the pricing issue, so 
: let's get this issue be- 
: hind us. You want 


processor-based pric- 


We want to make a 


: comparison between Oracle and IBM : 
: as easy as possible. It’s simple: This 
: is our price, $40,000 per processor 
: They're priced at $20,000 per pro- 
: cessor, but look at all of the things 

: that [DB2] doesn't include. They're 
: getting you for every little thing. You 


LARRY ELLISON: 
“IBM wants to com- 
pare prices. Let’s 
compare prices.” 
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company really competes on 
price. Microsoft doesn’t have 
the and manageability 
that Oracle and IBM offer, ana- 


lysts noted. 


tools 


“There are technical trade- 


offs no matter what you are 
choosing between,” acknowl- 
edged Jeff Ressler, lead prod- 
uct manager for Microsoft SQI 
Server. 
In the 
most users are simply looking 
database that 
delivers the features they need 
their He 
said that the next major release 
of SQI code-named 


Yukon, will make it easier to 


end, Ressler said, 


for a scalable 


to run businesses. 


Server, 


build high-end applications. 

Even though Oracle is “rais- 
ing the stakes all the time” 
with new features like online 
analytical processing and data 
mining, IBM Microsoft 
still viable options for 
many users, said Richard Win 
ter, CEO of Waltham, Mass. 
based database think-tank Win- 
ter Corp. 

He said that only 10% 
users have the kind of demand- 
ing, high-end 
that need all of that Oracle in- 
novation. D 


and 
are 


of 


requirements 


: Start adding all this stuff up, and 

: they're actually more expensive than 
: we are. Isn't that a surprise? We're 

? much more economical. Software 


price is just one component of total 


: cost of ownership, which includes 
: the software, the hardware, the net- 
: work and the development of the 


application 


Q: Are you concerned 
about what has been 
called a potential 
e-business backlash 
from users who may 
not be ready to put 
all of their applica- 
tion eggs in the 
Oracle basket? 

A: No. We're by far the 
most popular database 
with SAP, PeopleSoft or 
Siebel users. We've achieved the 


: Holy Grail of database computing. 
: Maybe the single most important 

: thing to all of our customers is the 
: issue of fault tolerance. The idea is 
that these applications just won't 

: go down. 





A customer gets through to you. 
So, now what? 


It’s an important moment. How many times a 
day does this happen? Hundreds? Thousands? 
Make the most of every one with Customer 
Relationship Management solutions from Avaya. 
And make customers for life. Here’s how. Unique 
predictive inquiry routing helps anticipate each 
customer's needs. And puts them through to the 
person in your company who can help them best. 
So whether they’re clicking, or calling, or e-mailing, 
or whatever, their needs are met. Their questions are 
answered. Their problems solved. Treat people better 
than they ever thought possible. With Avaya. Call 
866-GO-AVAYA or visit avaya.com/solutions/crm 


Communication without boundaries 


AVAY, 


communication 





NEWS 


Airlines, Boeing ‘Take 
Internet to the Skies 


Analysts call venture a winner, but it 
faces competition and nagging problems 


BY BOB BREWIN 
MERICAN Airlines 
Inc., United Air 
Lines Inc. and 


Delta Air 
Inc. last 


Lines 
week 
to launch 


announced plans 


broadband airborne Internet 


service on 1,500 aircraft, with 


initial service slated to start in 
the second half of next year. 
rhe three airlines are team 


ing up with The Boeing Co. 
and initially planning service 


U.S. and 


satellite 


on domestic trans 


Atlantic 


transponders leased from Lo- 


routes over 
ral Space & Communications 
in New York 


Electric Co. Boeing has yet to 


ind General 


sign for satellite 


an agreement 


capacity across the Pacific 


Boeing spokesman Terrance 
Scott said 

The Connexion by Boeing 
service will provide raw data 
speeds of 20M bit/sec. to the 
aircraft, with upload speeds 
from the planes of between 
1M and 1.5M bit/sec., according 
to Scott. The minimum guar 
anteed speed to a p 


56K 
equivalent of a dial-up modem. 


assenger 


will be bit/sec., or the 


Scott couldn’t provide an aver- 


data transmission speed 


but said passengers would be 


age 
slowed to 56K bit/sec. only if 
“all 300 
plane hooked in at the same 
time.” 

Seattle-based Boeing and its 


passengers on the 


partners are still developing 
pricing for the Internet-in-the 
sky service, Scott said, with 
initial rates “running about $20 
an hour, coming down to about 
$10 an hour when the service 
ramps up.” 

Seattle-based Tenzing Com 
munications Inc. has already 
signed deals to provide similar 
Internet and e-mail service toa 
number of foreign carriers, in- 
Pacific Air 
ways Ltd. in Hong Kong, Singa 
pore Airlines Ltd. anc 
Atlantic Airways Ltd. in Lon- 


Cathay 


cluding 


Virgin 
don. Tenzing downplayed last 
week’s announcement by Boe 
ing, Chicago-based United, At- 
lanta-based Delta Fort 
Worth, Texas-based American. 


Peter Lemme, vice president 


and 


of business development at 
Tenzing, said his company has 
both “a time-to-market ... and 


price advantage over Boeing.’ 


Airbus Has Its Own Net Plan 


day after the Boeing an 
ement, European airplane 
manufacturer Airbus Industrie 
ij plans to invest in Tenzing 
and to use the vendor's wireless 
5 technology to 


provide e-mail and Interne 


reveale 


communications 


access 
lo airline passengers. 

Blagnac Cedex, France-based 
Airbus said it is buying a 30% 
interest in Tenzing for about $44 
million. Tenzing will also become 
the aircraft maker's preferred sup 
plier for in-flight communications 
capabilities. The two companies 
said they will start installing the 


technology in some Airbus planes 
during the next few months. 

According to Alan Reiter, an 
analyst at Wireless Internet & 
Mobile Computing in Chevy 
Chase, Md., the Airbus/Tenzing 
deal “evens the playing field” in 
the wake of Boeing's broadband 
announcement 

t since the in-flight Internet 

business is so new, “it’s prema- 
ture to talk about market leaders,” 
he added. “The advantage will go 
to the company that signs up the 


NOst air 


- Bob Brewin 


Although Tenzing has yet to 
firm up its prices, Lemme said 
the cost to passengers “will be 
than Con 


substantially less” 


nexion by Boeing. Lemme 
maintains that Tenzing’s abil 
ity to provide service today on 
trans-Pacific routes is another 
advantage over Connexion. 
But comparing the two ser 
vices is like comparing “apples 
and oranges,” Scott said. “Ten 
2.4K 


bit/sec. speeds” to its trans-Pa 


zing only provides 
cific airline customers, he said. 
fired back, 


that since Boeing and its part- 


Lemme saying 
ners haven't yet secured satel- 
lite capacity over the Pacific, 
“that makes their data rate zero 
bits per second.’ 


Alan Reiter, an analyst at 


Wireless Internet & Mobile 
Computing in Chevy 
Md., called the Connexion ser- 
“a real winner and a no 


Chase, 


vice 
brainer.” 

“Twenty dollars an hour is 
far less than what it costs to 
make just a satellite phone call 
today,” But, he 
added, “this is the kind of ser- 


Reiter said. 
vice where the devil is in the 
details and United 
hard time getting its laptop 


has a 


power ports to work.” 

Connexion by Boeing is 
owned and operated by a joint 
venture created by Boeing and 
its three airline partners, with 
each company sharing in rev- 
enues. Scott declined to detail 
the terms of the revenue-shar- 
ing agreement. 
Boeing, which announced 
the Connexion service in April 
last year, predicted at the time 
that 10-year 
enue from broadband airborne 
Internet services could hit $70 
billion. D 


worldwide rev 


Certicom Launches Data 
Encryptor for Palm Products 


marketplace, said Stacey Wu, 
an analyst at Mobile Insights 
Inc., a consultancy in Moun- 


New technology 
provides security 
for enterprise apps 


BY JAIKUMAR VIJAYAN 
Security vendor Certicom Inc. 
this week will launch a data 
encryptor for Palm Inc. hand- 
held computers that addresses 
a growing need in the mobile 
market, users and analysts said. 
The technology, called Mo 
vianCrypt, employs 128-bit ad 
vanced encryption standards to 
protect information on hand 
held devices, according to the 
Hayward, Calif.-based vendor. 
The technology works with 
all Palm devices running Palm 
OS Version 3.0 and above and 
requires little effort by users 
been installed, 


once it has 


} | according to Tracy Grover, a 
| Certicom product manager. 


The technology addresses a 
crucial need in the mobile 


tain View, Calif. 
Handhelds 
that were once used for gener- 


such as Palm's 
al-purpose productivity appli- 
cations are being increasingly 
used in core enterprise-level 
that re 
quire increased levels of secu- 


rity, Wu said. The security tech- 


mobile applications 


nologies that currently come 
integrated with such 
are inadequate for this purpose, 
she added. 


devices 


Password Log-in 

MovianCrypt implements a 
password-based log-in system. 
The password unlocks a key 
that decrypts data as it’s being 
accessed and encrypts data 
as it’s being stored. Both cus- 
tom and standard applications, 
such as the address book and 
memo pad, can be secured in 
this manner. 

The product runs on 98KB 
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Internet in the Air 


American, Delta and United 
plan to deliver broadband 
Internet service to 1,500 air- 
craft starting in the second 
half of next year in partner- 
ship with Boeing. The service: 


> Provides raw download 
speeds of 20M bit/sec. and 
uploads of 1M to 1.5M bit/sec., 
but partners set guaran- 
teed minimum connection 
to individual passengers at 
56K bit/sec. 

> Will be offered on domestic 
and trans-Atlantic routes; no 


date set for the start of 
trans-Pacific service. 


> Will be priced initially at 
$20 per hour, then $10 per 
hour as usage picks up. 


> Competes with rival Tenzing, 
which has deals with Vir- 
gin Atlantic, Singapore Air- 
lines and Cathay Pacific. 


of storage memory and about 
8KB of dynamic memory and 
uses idle-CPU time to encrypt 
and decrypt data. 

The overall result is a secu- 
rity technology that 
affect performance or hog the 
CPU and 


resources of hand- 


doesn't 


relatively 
memory 
held devices, Wu said. 

“The other benefit is that it 


does not impose too much of 


meager 


a responsibility [to encrypt or 
decrypt data] on the end user,” 
she added. 

The Department of Psychia- 
try at the Sacramento-based 
University of California, Davis, 
Medical Center is beta-testing 
MovianCrypt for a project in- 
volving 40 Palm IIIxe hand- 
helds. 

Physicians are 
handhelds to type notes about 


using the 


patients and to share patient 
care information. With Mo- 
vianCrypt, it is possible to do 
so in a secure fashion and with 
very little impact on perfor- 
mance, said John Luo, director 
of psychiatric informatics at 
the university. D 


MORE 


For more wireless coverage, see page 20. 
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POINT OF VIEW 


Agility 

As applied to the computer industry, 
agility takes on a new meaning. 
Compaq and Microsoft are constantly 
striving to embody that concept. 
www.windows2000advantage.com/ 
pov/03-19-01_agility.asp 


ae TECH EDGE 


The alleged Active Directory 
security flaw 


The security flaw only occurs 
when documented procedures 
are not followed. 
www.windows2000advantage.com/ 
tech_edge/04-16-01_alleged_flaw.asp 


Chris Koontz shares his 
experience 


Chris Koontz is E-business 
Practice manager, Parks & 
Company, a consulting firm. 
www.windows2000advantage.com/qa/ 
04-23-01_koontz.asp 


COLUMNS 


With .NET every application can 
function as a Web service 


The Common Language Runtime fea- 
ture of .NET lets you create Web 
services in many languages. 
www.windows2000advantage.com/ 
columns/05-21-01_net.asp 


© CASE STUDIES 


BT Ignite Auction Services 


Fueled by Microsoft Windows 2000 
and Compaq ProLiant servers, BT 
Ignite Auction Services, easily builds 
online auctions. 
www.windows2000advantage.com/ 
case_studies/06-04-01_auction.asp 


POINT OF VIEW > 


Compag, Microsoft combine efforts to 
facilitate Windows 2000 Server, Advanced 
Server implementations 


For customers upgrading to Microsoft Windows 
2000 Server or Windows 2000 Advanced Server, 
Microsoft and Compaq are working together to 
help ensure that the experience is a positive one. 


For the full story, visit: 
www.windows2000advantage.com/pov/ 
06-11-01_advanced_server.asp 


Q&A > 


Leonard DiCostanzo blends business and 
technology solutions for small and medium 
business clients 


Leonard DiCostanzo is president and founder of 
Turnkey Computer Systems. During a recent inter- 
view with Windows 2000 Advantage executive 
editor Bruce Hoard, he discussed topics that are 
essential to the success of small and medium size 
firms. 


For the full story, visit: 
www.windows2000advantage.com/ga 
06-11-01_dicostanzo.asp 


MOMENTUM SERIES > 


Study says Compag increases leading industry- 
standard server customer satisfaction rating for 
second consecutive quarter; Dell fades 


According to a new study from Technology 
Business Research, Compaq has increased its 
industry-standard server customer satisfaction 
ratings for the second successive quarter. 


For the full story, visit: 


www.windows2000advantage.com/news/ 
05-28-01_industry_servers.asp 


What is Windows 2000 Advantage? 


The mission of Windows 2000 
Advantage is to become your primary 
source of timely, useful information for 
planning and implementing Microsoft 
Windows 2000 on Compaq solutions 
and services. 

Windows 2000 Advantage is a Web- 
only magazine because that lets us 


bring you, the IT leader, great stories 


keeping their companies on top of the 


MOMENTUM SERIES> 


Dedicated appliance servers provide targeted 
functionality 

While it's no secret that Microsoft Windows 2000's 
Active Directory has been a boon in helping users simplify 
network administration, users are also finding the directory 
is a godsend when it comes to enhancing their security. 

Prominent among Active Directory’s security capabilities 
is the Group Policy function, which makes it possible to exert 
a far more detailed level of control over what users can and 
cannot do on the network than was ever possible with 
Windows NT 4.0. 

Users also report that virtual private networks (VPNs) 
are simpler to set up and manage with Active Directory, and 
that even simple dial-in connections are more reliable than 
they were with NT 4.0. In addition, users are beginning to 
explore integration strategies that would tie Active Directory 
in with advanced security technologies such as Public Key 
Infrastructure (PKI), smart cards, biometrics and authoriza- 
tion systems. 

Michael Perez is an NT administrator at Townsend 
Analytics, a software developer in Chicago that created and 
runs Archipelago, an automated stock trading platform. The 
platform, used to enable the buying and selling of shares in 
the major stock exchanges, consists of about 900 servers, 
most of which are Compaq ProLiant models. They run a mix 
of Windows 2000 Server and Professional, NT 4.0 Server 
and NT Workstation, configured as a server. 


For the full story, visit: 
www.windows2000advantage.c 
features/06-04-01_security_fe 


| QUOTE OF THE WEEK > 


“Small and medium enterprise firms 
really need to see the value of 
technology and make sure they 
educate their people enough to use the 
technology tools on hand.” 


j nar Nirvnetanzn 
— Leonard DiCostanzo 
president 


fr . Cire me 
Turnkey Computer Systems 





that apply to your day-to-day work. 
We'll keep you up to date with a weekly 
e-mail alert so you don’t miss a thing. 
Windows 2000 Advantage is under- 
written by Microsoft and Compag. Its 
charter is to address the issues that 


| most concern IT managers charged with 


latest and best solutions Microsoft and 
Compag have to offer. Toward that goal, 
we offer a wide range of stories includ- 
ing case studies, columns and news to 
provide you with information you can’t 
find anywhere else. 


_www.Windows2000Advantage.com/450 _ 
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IMode Users Warned 
Of Malicious E-Mail 


NTT DoCoMo Inc., Japan’s top 
wireless carrier, last week warned 
customers of its iMode wireless In- 
ternet service about malicious 
e-mail messages that can use spe- 
cial commands to freeze the 
screens of their mobile phones, dia 
an emergency number automatical - 
ly or make calls to large numbers of 
people. The Tokyo-based company 
said that although users hadn't yet 
reported any damage resulting from 
the malicious e-mail, it was consid 
ering legal action against the 
senders because of the inconve- 
nience to customers. 


- 


Corporate Network 
Searching Apps Bow 


AltaVista Co. last week announced 
its AV Enterprise Search applica- 
tion, designed to give users access 
to a wider array of data within their 
companies’ networks. The software 
will work inside corporate firewalls 
allowing workers to get more infor- 
mation faster, according to Alta- 
Vista. The Palo Alto, Calif.-based 
company also announced AV Per- 
sonal Search software, which gives 
individual corporate users similar 
search capabilities on the hard 
drives of their desktop computers. 


Short Takes 


IBM last week announced a pair of 
network-attached storage devices 
aimed at filling out the company’s 
line of storage products so it can 
compete on a wider scale with 
rivals such as EMC CORP. and 
HEWLETT-PACKARD CO. ... 
Former FEDEX CORP. CIO Dennis 
Jones was promoted to president at 
business-to-business software ven- 
dor COMMERCE ONE INC. last 
week. Jones had joined Pleasanton, 
Calif.-based Commerce One as 
chief operating officer and vice 
chairman in April, a year after retir- 
ing from Memphis-based FedEx. He 
will replace Robert Kimmitt, who is 
leaving to join New York-based AOL 
TIME WARNER INC. 


NEWS 


Microsoft Touts .Net 


To Wary Developers 


Web services aren’t yet popular, but 
users will have to migrate, say analysts 


BY LEE COPELAND GLADWIN 
EVELOPERS CAN 
grab the latest 

Web development 
tools from Micro 
soft Corp. at the 

2001 

the 


may quickly become shelfware 


conference this 


TechEd 


week, but new software 


as companies defer their 
moves to Web services. 

Microsoft plans to give at- 
tendees preview copies of the 
second beta version of its long 
awaited Visual Studio.Net and 
Net framework software at the 
annual event in Atlanta 

In addition to supplying pre- 
views of its tools, the company 
also needs to persuade end 
users to embrace its .Net Web 
services framework. 

“Web services is not some- 
thing we’re planning to do,” 
said Evelyn Follit, CIO at Ra- 
dioShack The Fort 
Worth electron- 
ics retailer is happy with its in- 


Corp. 

Texas-based 
vestments in Microsoft tech- 
nologies, but it doesn’t have an 
interest in swapping services 
over the Web, she said. 

June of 
year, Microsoft’s .Net initiative 


Introduced in last 
consists of a middleware layer 
that will allow Windows com- 
ponent-based applications to 
swap functionality and process 
requests from 
built using other programming 
languages and other operating 


applications 


systems. 


Web Services Unsold 

Although rivals IBM and Sun 
Microsystems Inc. are 
pushing Web services, a num- 
ber of users said they still 
aren't sold. 

For example, Navimedix Inc. 
considered switching to a Java- 
based environment last year, 
said Chuck Grindel, software | 
engineer at the Boston-based 


also 


online health insurance claims 
processor. 

Navimedix ultimately opted 
to stay with Microsoft because 
of its existing in 
vestments in the 
vendor’s _ servers, 
databases and cus 
tom-developed ap 
plications. But the 
company has no 
plans to build .Net 
applications. 

“We didn’t 
anything com- 
pelling enough [in 
Java] to justify the switch,” said 
Grindel. “We don’t do anything 
.Net yet; we’re using the older 


see 


Continued from page 1 


UDDI 


“Microsoft is aware that se 
curity is an issue,” said Darryl 
Plummer, an analyst at Stam 
ford, Conn.-based Gartner Inc 
“As you open things up, you 
open up the door for security 
holes. They’re trying to come 
up to speed in a public forum, 
and if large controls were in 
place, it wouldn’t take off.” 

Microsoft officials said con- 
vetting 


trols for 


that register in the UDDI di- 


companies 


rectory would be discussed at 
a private conference for the 
registry’s adviser group in At- 
lanta this week. 


But beyond the challenge of 


vetting registrants, the spon- 
sors of the UDDI directory 
also appear to be facing anoth- 
er problem: uninformed direc- 
tory members. 

Markle Stuckey Hardesty & 
Bott is listed in the UDDI di- 
rectory. But David Hardesty, 
vice president of the Larkspur, 
Calif.-based 


e-commerce ac- 


ee 


Microsoft will provide 
attendees of this 
week’s TechEd 2001 
conference 
view copies of its 

-Net platform and Beta 
Version 2 of its Visual 
Studio.Net tool set. 


technology, but the platform is 
performing.” 

But like it or not, Microsoft 
users will have to migrate ex- 
isting code, said analysts. 

“Going from Visual Basic to 
Visual Studio.Net is not as dif- 
ficult as going from Visual Ba- 
sic to Java,” said Mark Driver, 

an analyst at Gart- 
Inc. in Stam- 
ford, Conn., who 
that 
40% of Windows 
based Web appli- 
will 
to be migrated. 


ner 


estimated 


with pre cations need 
fo shore up sup- 
port for .Net, Mi- 
crosoft will need 
to address the con 

cerns of developers, said Evan 
Quinn, an analyst at Hurwitz 


Group Inc. in New York, who 


counting firm, said he has no 
idea what the directory is and 
has no plans to introduce Web 
services at his company. 

“I have 
registering,” Hardesty. 
“We haven't and we 
don’t know anything about it, 
but that’s not to say that we 


no 
said 
used it 


didn’t sign up for it. There are 
lots of things out there on the 
Web, but you just can’t remem- 
ber everything.” 

Bob Gill, owner of Shrimp 
Landing, a seafood wholesaler 
in Crystal River, Fla., said he 
agreed to register after re 
sponding to an e-mail solicita- 
tion from IBM. 


oa he 


recollection of 
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said, “.Net is still a little bit 
nebulous right now.” 

“They have to make the pro- 
grammers feel that this tech- 
nology is cool and that there is 
a commercial upside for their 
career in using it,” he said. 

Microsoft is expected to 
showcase two of its new Visual 
Studio.Net tools this week. 

Visual Studio.Net Enterprise 
Architect (VSEA) 
conceptual, logical and physi- 


provides 


cal modeling tools for mapping 
out the business requirements 
of .Net applications. 

Visual Studio.Net Enterprise 
Developer (VSED) 
frameworks and templates for 
creating .Net applications, as 


contains 


well as a version-control and 
data management utility. 

Both VSEA and VSED offer 
software and database testing 
tools, the first version of Mi- 
crosoft’s new object-oriented 
language C# (pronounced ( 
sharp) and the Common Lan- 
guage Runtime for .Net. 

Visual Studio.Net and the 
.Net platform are expected to 
ship by year’s end. D 


But Gill said he doesn’t see 
himself using or offering Web 
services from the company’s 
one-page Web 
gminet.comAhrimp. 

“I’m sticking my neck into 
an area for which I know noth- 
ing about,” said Gill. “First, I 


site at www 


need to get my site up and run- 
ning. Then Ill think about it.” 
It may take years before the 
UDDI has much impact, but its 
proponents will need to dem- 
onstrate that it 
end-user companies and not 


has value to 


just technology vendors, said 
Ted Schadler, an analyst at 
Cambridge, Mass.-based For- 
rester Research Inc. D 


Mls Bi 


Loud Speakers inc. 


Stone Consulting 
Art’s Bicycle Sales 


| _ Art Garfunkel 


& Repair 
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BUT STILL, WE WEREN’T SATISFIED. 
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r $1949" 


To buy direct from Compag, or for your nearest reseller COMPAG 
1-877-299-8326 or visit compaq.com/serversaver Inspiration Technology 





14 


NEWS 


Execs: Building Consensus 
Is Biggest B2B Challenge 


Chemical industry e-business leaders say 


colleagues resist changing business processes 


BY MICHAEL MEEHAN 


SINESS execu- 
es trom some of 
he world’s largest 

chemical companies 

$ ithered at a 

conference last week said they 
spend much of their time con- 
ant colleagues that 


usual 


Dusiness as 


the past year developing a Web 
site for its corporate Customers 
Du Pont plans to migrate all of 


. {4} 
its fabric, 


chemical and bio 
technology divisions to similar 
business-to-business sites by 
the end of the year. 

Yet Boothe said she still has- 
n't been able to build consen- 
sus among the divisions on 


common B2B infrastructure 
and portal technologies 

“We have to influence, not 
dictate,” she said at the the In- 
ternational Quality & Produc- 
tivity Center Chemicals On- 
line conference here. “We have 
to get these different business 
units to want to change, or it 


won't work.” 


We have to get 
these different 
business units to 
want to change, 
or it won't work. 


LISA BOOTHE, GLOBAL 
E-BUSINESS LEADER, DU PONT 


director of 
erce at Ashland Distri 
and 


Fannon, 
bution Co., a polymer 
chemicals subsidiary of Cov- 
ington, Ky.-based Ashland Inc., 
said some divisions in his com- 
achieved online 


pany have 


sales as high as 28% of total 
sales, while others have barely 
made a dent 

The Dublin, Ohio-based unit 
just unveiled a corporate por- 
tal called the Ashland Distrib 
Center that 


provides catalogs and ordering 


ution Commerce 
capabilities for all of its divi- 
sions, but it wasn’t an 


thing to build, said Fannon. 


easy 


“Just those four words at the 


E-Business Tips 


A few suggestions from Bill 
Gaughan, vice president of 
e-business and IT at Bayer: 
@ Feel free to provide direc- 
tion to your customers on 
standards, connectivity 
and strategy. Many of 
their back-office systems 
won't be able to process all 
the relevant data. 


@ If possible, use XML to 
execute transactions in 
your back-office systems 
and then use that XML 
standard externally. 


@ Start with small projects 
and let success sell 
growth throughout your 
company. 


3Com Aims to Please Users 
With New Switches, Pricing 


a SuperStack 3 Switch 


Products called 
‘fairly innovative,’ 
easier to configure 


BY JAMES COPE 
Despite predictions that go 
liaths like Cisco Systems Inc 
Nortel Networks Corp 


will ultimately control the net- 


and 


work equipment market, some 
3Com Corp. customers remain 
relatively about 


their preferred vendor’s stay- 


optimistic 


ing power. 

And 3Com is trying to keep 
them that way. 

Last week, the Santa Clara- 
Calif.-based firm introduced 
three new Ethernet switches, 
including a higher-density Eth- 
ernet 10/100M bit/sec. Super- 
Stack 3 Switch 4300 with 48 


ports; 
4400 


switch 


detect and 


traffic 


that 
network 
on type of 


can 
based 


application; and 


high-performance Layer 3 
Switch 4005, which handles up 
to 12 Gigabit Ethernet ports 

Ward, 


network services at the Boston 


Graham director of 


University School of Medicine 
said he’s “strongly considering 
the 3Com 4000 Series switches 
for further floor-switch up- 
grades.” 

Introducing the 4400 is a 
positive move for 3Com, be 
cause at a very basic level, it 
can distinguish network traffic 
at Layer 4 by application, said 
Joel Conover, an analyst at 
Current Analysis Inc. in Ster- 
ling, Va. That capability is key 
for managing quality of service 
for applications used by ac- 
counting departments and for 


top of the page, it took every- 


one about three months to 
agree on those,” he said. 

Bill Gaughan, vice president 
for e-business and IT at phar- 
maceuticals and chemicals 
company Bayer Corp. in Pitts 
burgh, said Bayer AG’s global 
CEO in Germany set the direc- 
tive to migrate sales to online 
channels last year. The current 
economy makes it 


difficult to fund major proj- 


state of the 


ects, however. 
“You're not going to get 
that that 


supply chain connectivity soft 


million dollars for 
ware you want, so you have to 
pick more limited projects,” 
Gaughan said. 
But that’s not necessarily 
a bad thing, he added. “Build- 
ing minimum functionality 


has proven more cost-effective 


3Com’s own voice over IP tele- 
phone system, he said 

Ethernet switch products 
Net- 
works Inc., Extreme Networks 
Networks 
Inc. have similar capabilities. 
But Conover noted that unlike 
3Com, those vendors also offer 


from Cisco, Enterasys 


Inc. and Foundry 


switches with built-in routing 
capabilities 

Ed Krusinski, a communica- 
tions specialist at the National 
Cancer Institute in 
Frederick, Md., said 
he has been testing 
the 3Com Super- 
and is interested 
in it 
the increased num- 


because of 


ber of ports. The 
institute uses 3Com 
equipment. 

Like Ward, Kru- 
sinski manages a 
network in a cam- 
pus environment. 

“We have a lot 
of scientists doing 
research. 
We have every type 


lots of 


naa 
Price Tags 


Stack 3 Switch 4300 The new 3Com Ether- 
net switches cost: 


® SuperStack 3 Switch 
4400: $1,750 - Application- els of 
aware 10/100M bit/sec. 
Ethernet (Layer 4) 
@ SuperStack 3 Switch 
4300: $2,995 - 48-port 
workgroup 10/100M bit/sec. 
Ethernet (Layer 3) 

® 3Com Switch 4005: 
$9,995 - Modular Switch - 
scalable from nine to 96 10/ 
100M bit/sec. ports and 1 to 
12G bit/sec. ports (Layer 3) 
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than full 
Gaughan said. 
Different divisions at Bayer 


implementations,” 


will ultimately be expected to 
share similar transaction and 
back-end standards, but they 
differ on how 
they collaborate with their var- 


will probably 


ious business partners, said 
Gaughan. 

E-business divisions need to 
be partners with other units, 
argued Allen Jezouit, director 
of e-business at and 
chemicals distributor Praxair 


Technologies Inc. in Danbury, 


gases 


Conn. 

Jezouit’s group is brought 
in whenever another division 
is looking to sell via an online 
auction or is buying new tech- 
nology. “What we want to avoid 
is doing redundant things,” he 
said. 

Jezouit said everyone in his 
group was brought in from the 
firm’s various business units 
so they would have contacts 
within those units. D 


For more on B2B issues, visit our Web sit 
www.computerworld.com/ecommerce 


of machine and a lot of dif 
ferent applications,” Krusinski 
said. “For me, [3Com is] mak- 
ing things a little simpler than, 
say, a Cisco box. They’re easier 
to configure; that’s their strong 
est point.” 

Conover said that since 
3Com’s restructuring and its 
announcement last year of a 
new focus on small and mid- 
size businesses, customers may 
about the 


still be nervous 


company’s long- 
term plans. 

But, he said, “in 
general, the new 
switch products 
are fairly innova- 
tive and offer lev- 
local-area 
network | perfor- 
mance required by 
many enterprises 
at a pretty compet- 
itive price point.” 

Conover 
the price point is 
generally 25% less 
than those of simi- 
lar products from 
competitors. D 


said 
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SAP Pushes CRM 
Apps at Conference 


Some say company may have marketing 


advantage because of large ERP following 


BY MARC L. SONGINI 


lients 
York-based 
rette maker 
Morris U.S.A 

AW-Volkswagen Automotiv 
. SAP AG 


Ph 


OUI user ¢ 


week to try 


pplication 
a variety of product 

> confer 

. SAP detailed a new ver 
ts mySAP CRM soft 


ats due for release dur 


Flooding 


i th 


lerscore 


ris County gov 
ffices in Houston, 
buildings were 
knocked completely off-line by 
floodwaters, which ravaged un- 
jerground utility and commu- 
ions tunnels, destroying 
x, phone cables and other 
systems 
“We had the perfect storm in 
the tunnel systems,” said Steven 
Jennings, executive director of 
the county’s central technology 
What 
that the 


method of placing data centers 


center. was learned, he 


said, is traditional 
n the bowels of buildings is 
dangerous because it can leave 
critical systems vulnerable. 

data 
communications 


centers and 
equipment 
hubs need to be located on up- 


per floors, isolated from flood- 


Instead, 


g the third quarter. New fea 

| include a billing tool 

» order-to-cash 

1e ability to in- 

tegrate the CRM technology 
with supply chain applications 


from SAP or rival vendors. 


Gaining Attention 

But despite SAP’s efforts, its 
CRM offering still seems to be 
something of a well-kept se 
cret compared with its flagship 
enterprise 


(ERP) 


resource planning 

software, said Brian 
an analyst at Fram 

Mass.-based market 
1 IDC 


cen nenmn th Ona 


RM] but not 


Decause of their 


recognized as 


legacy in 


wvershadowed by 
the market 
in San Mateo, Calif., 
idded, 
SAP does have the benefit of a 


leader, Siebel Sys 
tems Inc 
Bingham said. But, he 
huge user base for its ERP ap 


plications and has enlisted 
CRM sales help from the likes 
of IBM 

Next month, Irving, Texas 
products 


based consumer 


manufacturer Kimberly-Clark 
Corp. plans to go live with an 
online product catalog based 
on mySAP CRM Ladd 
Nichols, director of global 
strategic 


Salad 


information systems 
The catalog will allow users to 
perform general yusiness 


functions, such as procure 


ment, while also providing ac 


Ns ae 


FLOODWATERS from Tropical Storm Allison knocked out IT depart- 


ments throughout Houston last week. 


ing and other problems. Future 
government buildings, includ 
ing several currently on archi- 
tectural drawing boards, will 
incorporate such changes, Jen- 
nings said. 

“You train for scenarios, and 
what you find out is that Moth- 
er Nature has a curve ball,” he 


said. 


“The and 
[were] probably more exten 
than 


Houston,” said 


storm flooding 
we've ever had in 
lim Tindle, a 
senior vice president of strate- 
gic planning at Solid Systems 
Inc., a man- 
aged hosting provider and sys- 
tems integration firm. 
“Companies that were pre- 


sive 


Houston-based 


cess to educational materials 
and other documentation 
“We 


gest detractors of SAP,” said 


were probably the 


Nichols, looking back to the 
tart of the multimillion-dollar 
project three years ago. Unlike 
large manufacturers, he 
Kimberly-Clark didn’t 
use SAP R/3 to run its back 
Neverthe- 


noted, 
office operations 
less, Nichols said, he decided 
SAP had the most complete vi 
sion for Internet-based CRM 
functionality. 

The company has also in 
stalled an R/3 system for the 
sole purpose of connecting to 
the online catalog and format 
ting data for use by the CRM 
applications 

Osram Sylvania, a Danvers, 
Mass.-based maker of lighting 
products and a longtime R/3 
mySAP 


CRM in October to power its 


user, began running 
online catalog, as well as for 


sales order processing, pro 
curement and other functions. 

Mehrdad Laghaeian, CIO at 
the company’s Osram GmbH 


subsidiary, said he plar in 


pared fared pretty well for the 
most part,” he said. But it was 
that often 


the little details 


caused unforeseen problems 


although many companies 
had emergency power genera 
tors on hand, many of those 
generators were left wet and 
useless because they were in 
basements, which were among 
the first areas to flood 

Some 


companies had _in- 


stalled generators on 

protect them 
flooding. But that led to a dif- 
ferent problem, Tindle 
“Generators 


upper 
floors to from 
said. 
have 
fuel because [the businesses] 
hadn’t contracted with anyone 
for refueling,” he said. 

A lot of the computer and 
data communications equip- 
ment in basements of corporate 
buildings were severely dam- 
aged by the drenching rains, 
said Tindle. “Those buildings 
got hit, and it really took down 
a ton of data communications 
infrastructure,” he said. 

Tom Smith, a 
president of IT at the Houston 
headquarters of trash hauler 
Waste Management Inc., said 


senior vice 


run out of 
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BLS 
Coming Next 
Quarter 


SAP AG's mySAP CRM 3.0, 
which will be available next 
quarter, includes the following 
enhancements: 

# A billing tool for order-to-cash 
processing. 


a The ability to attach to supply-chain 
management applications to feed 
customer data directly into the 
procurement process. 


® The ability for companies to consoli- 
date all of their customer data into one 
application for analysis. 


stall the Version 3.0 upgrade 
announced yesterday and is 
now considering ways to ex- 
ploit new features such as call 
center and mobile sales and 
service capabilities. 
Laghaeian also said he wants 
to use mySAP CRM to support 
collaborative commerce and 
supply chain planning process 
es with Osram Sylvania’s cus 


tomers and suppliers. D 


You train for 
scenarios, and 
what you find 

out is that 
Mother Nature 
has a curve ball. 

STEVEN JENNINGS, 

EXECUTIVE DIRECTOR, 


HARRIS COUNTY, TEXAS, 
CENTRAL TECHNOLOGY CENTER 


that although his company’s fa- 
cility didn’t experience flood- 
ing, some areas lost electricity 
for about 48 hours, and backup 
generators had to be used. 

The darkened hallways and 
stairways taught IT staffers a 
simple lesson, he said. 

“We should probably have 
more flashlights on hand,” 
Smith said. “It’s the little things 
you don’t think much about.” D 
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California Hack Points to 
Possible Surveillance Threat 


Power grid unaffected; perps unidentified 


BY DAN VERTON 
HIS MONTH'S reve- 
lation that hackers 
broke into comput- 
er systems owned 
by California’s pri- 
mary electric power grid oper- 
ator highlights a growing fear 
on the part of federal officials 
that 
be part of long-term intelli 


such intrusions could 
gence-gathering activities. The 
intrusion, which occurred this 
spring, remained undetected 
for 17 days. 

The intent of the network 
break-in at the Folsom, Calif.- 
based California Independent 
System Operator (Cal-ISO) 
wasn’t clear. But security ana- 
lysts said the lack of apparent 
damage that the 
break-in was conducted either 


indicates 


by an unsophisticated group of 


hackers or by attackers whose 
intent was to collect informa- 
tion about the systems and to 
document vulnerabilities. 

The incident, which took 
place between April 25 and 
May Il, is being investigated by 
the FBI. Although Cal-ISO offi- 
cials said they managed to 
trace the attack to a system in 
China, experts said current se- 
curity technology can’t distin- 
guish the noise of so-called 
script kiddies from the more 
nefarious hacking sponsored 
by governments or terrorists. 

“You still don’t 
you're dealing with a kid, orga- 
nized crime, an intelligence ser- 
vice or an economic competi- 
tor,” said Frank Cilluffo, a se- 
nior policy analyst at the Cen- 
ter for Strategic and Interna- 
tional Studies in Washington. 

However, government offi- 
cials and security researchers 
have documented a significant 
increase in Internet probes and 
server scans this year. A large 
percentage of the probes could 
be part of an organized effort 


know if 


by foreign intelligence services 
and other groups to map po- 
tential security holes in critical 
systems, officials said. 

A report released last month 
by the Defense Science Board, 
and 
group convened by the 


academic 
US. 
Department of Defense, con- 


an industry 


firmed that the current state of 


the art in cyberattacks in- 
cludes preliminary intrusions 
into various critical infrastruc- 
ture networks 

The primary threat to the 
most critical networks in the 
U.S. comes from countries that 
are actively mapping the Inter- 
net for vulnerabilities, 
Richard Clarke, national coor- 


said 


dinator for security, infrastruc- 
ture protection and counterter- 
rorism at the National Security 
Council. “And they know more 
about our national architec- 
ture than many of us 
Clarke said last month at an In- 


do,” 


ternet security conference in 
Washington. 

Cal-ISO is a nonprofit com- 
pany that was created by Cali- 
fornia’s government to run the 
bulk of the state’s electricity 
grid. Its systems are tightly in- 
tegrated with the major power 
distribution network serving 
the entire western U.S. Grids 
such as Cal-ISO’s are managed 
using highly proprietary tech- 
nology known as Supervisory 
Control and Data Acquisition 
(SCADA) systems. 

Potential vulnerabilities as- 
sociated with SCADA systems, 


H-1B ‘Premium Processing 
Plan Draws Mixed Reviews 


Critics say price tag 
will create classes 
of haves, have-nots 


BY JULEKHA DASH 
A new government program 
that, for an extra fee, would 
speed up the process for ap- 
proving H-1B visas for foreign 
workers is drawing mixed re- 
views among those involved in 
immigration issues. 

Trying to clear the backlog 
of pending foreign high-tech 
worker visas, the U.S. Immi- 
gration and Naturalization Ser- 
vice (INS) on July 30 will initi- 
ate a premium service that will 
process applications within 15 
days rather than 60 to 90 days 
for an additional fee of $1,000. 

But while labor attorneys, 
companies and H-1B holders 


applauded efforts to shorten 
visa times, 
questioned whether the ap- 
proach is fair to smaller firms. 

“A thousand dollars 
a long way towards our pay- 
roll,” said Jake Karrfalt, CEO of 
Alternative System Concepts 
Inc., an eight-person software 
company in Windham, N.H. 

While the $1,000 fee may be 
a “drop in the bucket” for multi- 
national corporations, it might 
be too much for small firms, 
said Vic Goel, an immigration 
attorney at Goel & Associates 
in Washington. “You're creat- 
ing a class of haves and have- 
nots,” he said. Goel also said he 
worries that the INS will re- 
quest additional information 
as a “delay tactic” rather than 
approve petitions. 

But Eyleen Schmidt, an INS 
spokeswoman, said the agency 
wouldn’t ask for unnecessary 


processing some 


goes 


particularly those used to man- 
age the flow of electricity, have 
been known for years and were 
documented in a 1996 report 
by a presidential commission. 

But the available 
tion about the vulnerabilities 
isn’t detailed enough for hack- 
ers to easily take advantage of, 
analysts said. 

“There’s a tremendous learn- 
ing curve for [infiltrating] 
SCADA systems,” Tim 
Belcher, chief technology offi- 
cer at Riptech Inc., a security 
consulting firm in Alexandria, 
Va. “This leads me to believe 
that [the Cal-ISO break-in] 
wasn’t an extremely sophisti- 
cated attack, because with 17 
days’ worth of access [to the 
systems there], I know what we 
could have done.” 

Cal-ISO spokesman Greg 


informa- 


said 


information, because it “only 
gives INS more work.” The 
goal is to eliminate the backlog 
within five years, which would 
then make premium process- 
ing obsolete, she said. 
Applicants 
agency’s new service will have 
a dedicated phone number and 
e-mail address to check the 
status of their petitions, allow- 
ing them to respond quickly to 


Speedy Service 


Regular vs. premium process- 
ing of H-1B visas by the INS: 


who use the 


REGULAR PROCESSING: 
> Takes 60 to 90 days 
> Costs $1,100 

PREMIUM PROCESSING: 
> Takes 15 days to accept, deny, 
request more information or provide 
Notice of investigation for fraud. 
> Costs $1,000 in addition to the 
$1,100 fee. 
> The extra fee is per petition. 
not per worker: A firm pays no more 
than $1,000, regardless of how 
many H-1B holders it wants to hire. 


[Foreign coun- 
tries] know 
more about our 
national archi- 
tecture than 
many of us do. 


RICHARD CLARKE, 
NATIONAL COORDINATOR 
FOR SECURITY, INFRASTRUCTURE 
PROTECTION AND COUNTER- 
TERRORISM AT THE NSC 
Fishman also downplayed the 
incident. The intruders “never 
really got close at all to our 
operational systems that run 
the grid,” he said. But the inci 
dent “was an attempt to breach 
our security, and we take that 
very seriously,” he added. “We 
are in the midst of an investiga- 


tion with the FBI.” D 


requests for more information 
Schmidt added. 

The INS plans to use the fees 
to hire 450 more staffers start- 
ing in fiscal 2002, which begins 
in October. Firms filing H-1B pe- 
titions before July 30 whose cas- 
es are still pending at that time 
will also be able to use the ser- 
vice, said Schmidt. The INS said 
it would refund the $1,000 fee 
to applicants whose petitions 
aren’t completed within 15 days. 

“If the INS needs money and 
can guarantee it will be used 
for faster processing, then it 
should 
across the board,” not just for 
applicants who pay the $1,000 
fee, said H-1B holder Murali 
Devarakonda, a senior consul 
tant at ShaktiSoft 
commerce consulting firm in 
Fremont, Calif. 

If the INS shortens H-1B visa 
processing times, more em- 
ployers will likely file for H-1B 
petitions, said Michael McGin- 
ley, Eastern recruiting manag 
er at Predictive Systems Inc., 
a New York-based networking 
consulting and 
firm. D 


increase _ [service] 


Inc., an e- 


integration 
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Web server farms have always been known for providing high 
application availability in a cost-efficient manner. Unfortunately, in 
the past they have also been known for manageability headaches 
But no more: Microsoft Application Center 2000 now makes managing 
Web applications and groups of Web servers as simple as managing 


a single server. 


Part of the flexible Microsoft .NET Enterprise Server family, Application 
Center 2000 is built to be the heart of a “scale-out” infrastructure 
model. “Scaling out” is a flexible approach to scalability that involves 
deploying Web applications across multiple servers to distribute and 


handle the workload. 


Application Center 2000 makes scaling out easier, with unified 
Web application and server-farm management that simplifies tasks 
like cluster management and 
application deployment. Plus, it 
makes it easy to achieve capacity 
on demand through automatic 
replication of applications when 
you add servers or make changes 
to existing applications. But 
simplicity is not all you get 
Application Center 2000 offers increased uptime through dynamic 


load balancing and by having no single point of failure. 


In sum, Application Center 2000 removes the hassle of managing multiple 
servers separately, while providing the availability and cost-efficiency of 
a “scale-out” model. Find out how to keep the odds in your favor: visit 


microsoft.com/applicationcenter 
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. » . 
handset makers: Ericsson Inc., 
Guidelines Posed for Wireless Handsets sssswrtesssaews, 
Operators supporting the effort 
BY MATT HAMBLEN ators of wireless networks last | next-generation devices. include AT&T Wireless and 
I ig makers of Global Sys week announced guidelines to Members of the new Mobile | Voicestream Wireless, which 
or Mobile Communica- | provide more consistent hand- | Services Initiative group in- | depend on GSM and its next- 
tions (GSM) phones and oper- | set features and services in | clude the world’s three largest | generation network, General 
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If your company’s white paper is not in Computerworld IT Reports, it is “LOST” 
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Packet Radio Services (GPRS) 
Part of the motivation be- 
hind the effort, which was co- 
ordinated by the GSM Associa 
tion in London, is to move be 
yond perceived usability prob 
lems with Wireless Applica 
tion Protocol (WAP) phones 
and to enhance _ wireless 
browsing of the Web, said 
Mark Smith, the association’s 
director of communications 

In its guidelines, the associa 
tion said it also wants to “repli- 
cate the success” of Tokyo 
based NTT DoCoMo Inc.'s 
iMode service, which is known 
for its ease of use. 

Analysts said any set of 
guidelines that will provide 
consistency for users is wel- 
come. “GPRS phone makers 
and operators definitely need 
more continuity as new ser 
vices roll out,” said Peter First- 
brook, an analyst at Meta 
Group Inc. in Stamford, Conn. 

Today, users can’t count on 
phones having consistent dis- 
plays — the size of the display 
and the number of lines of text 
or characters usually varies 
from model to model — much 
less consistent buttons for 
functionality, he said. For ex- 
ample, Firstbrook said his 
Ericsson phone has a button 
marked “No” next to a “Yes” 
button, which is used to turn 
the phone on and off. Other 
phones have “OK” buttons for 
powering on or off, and there 
are other variations as well. 

One principle benefit of the 
guidelines could be to help ap- 
plication developers who have 
found the current version of 
WAP difficult to work on, ana- 
lysts and members of the asso- 
ciation said. Smith stressed 
that the Mobile Services Initia- 
tive doesn’t mean the end of 
WAP and will instead serve as 


| a bridge between WAP 1.2, 
| which is used today, and WAP 


2.0, to be released next year. 
Compared with Europe, 
where GSM is widely used, the 
U.S. has relatively few GSM 
users. But GSM/GPRS use will 
grow substantially in the U.S., 
accounting for roughly half of 
all wireless users by 2003, 
Firstbrook said. That would in- 


| clude Voicestream, AT&T 


| 
| 
| 
| 


Wireless and Cingular Wire- 
less users, he said. D 
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NEWS 


J.D. Edwards Focuses 
On Collaboration 


Announces supply-chain integration, 
midrange support at annual conference 


BY MARC L. SONGINI 

TRUGGLING business 
vendor 
J.D. Edwards & Co. 
focused the spotlight 


applications 


on collaborative com- 
and 
time supply-chain integration 


merce technology real- 
at its annual user conference 
last week, as the company tries 
to position itself to reverse a 
continuing drop-off in soft- 
ware sales. 

At the 2001 
ence in Denver, J.D. Edwards 
announced a set of predefined 


Focus confer- 


collaborative business process- 
es based on new middleware it 
released earlier this year. The 
company also promised full 
technical the 
Collaborative Planning, Fore- 
and _ Replenishment 
standard and detailed plans to 
tailor 


support for 
casting 


collaborative applica- 


HP Increases Automation in 


tions to midsize users. 

In addition, the Denver- 
based firm is now offering real- 
time links between its supply- 
chain planning software and its 
OneWorld back-office applica- 
tions. Those systems previous- 
ly could exchange data only in 
batch mode, making it harder 
for users to quickly respond 
to supply-chain problems or 
changes. 

The various announcements 
came just one month after J.D. 
Edwards laid off 8% of its 
workforce as part of what it 
described as a “revitalization” 
effort following a series of loss- 
es and management changes. 
But company officials re- 
mained upbeat at Focus 200], 
claiming that the software ven- 
dor is on the road to recovery. 

Robert McCullough, an ana- 
lyst at Hurwitz Group Inc. in 


Latest OpenView Software 


Offers management 
that is end-to-end 


BY JAIKUMAR VIJAYAN 
NEW ORLEAN 

Hewlett-Packard Co. last week 
announced new functionality 
for its OpenView Integrated 
Services Management (ISM) 
software, claiming it will help 
automate more critical opera- 
tions for service providers and 
companies doing business over 
the Internet. 

HP’s ISM suite comprises a 
range of tools and services 
used to automate and manage 
key processes such as service 
delivery, service assurance, 
billing and usage. It includes 


software for order entry man- 
agement, activation, 
service-level-agreement man- 
agement, inventory manage- 
ment, usage mediation, billing 
services and a messaging bus. 
The 
nounced at the HP OpenView 
Forum 2001 here, are designed 
to give OpenView end-to-end 
management functionality, said 
Patty Azzarello, vice president 


service 


enhancements, an- 


and general manager of HP’s 


OpenView business unit. With 
it, users will be able to auto- 
mate the entire life cycle of a 
transaction, from service ac- 
cess through service provi- 
sioning, usage monitoring, re- 
porting and billing, she said. 
“Managing IT is not about 
the back room anymore,” Az- 


Framingham, Mass., said a new 
management team that J.D. Ed- 
wards put in place four months 
ago is showing a tighter focus 
on specific strategies, such as 
the plan to target collaborative 
applications at the midmarket. 
A year ago, McCullough said, 
the company’s business plans 
seemed more random. 


J.D. Edwards executives ac- 


Mea 
A New Focus 


J.D. Edwards announced the 
following at its user conference: 


ng Solutions apr 


zarello said. “It is much more 
about managing the customer 
experience.” 

Last week’s announcement 
builds on HP’s efforts to devel- 
op management software that 
offers a bottom-up view of IT 
infrastructure as well as a top- 
down view. Such “closed-loop 
service management” technol- 
ogy will not only allow quick 


identification and diagnosis of 


a problem anywhere in a ser- 


- Better View 


Among the OpenView enhancements announced by HP: 


knowledged at the conference 
that some of the more advanced 
collaborative Web technology 
being touted by the company is 
“next year’s stuff,” McCullough 
said. But the move to emphasize 
collaborative commerce now 
“will get them some awareness” 
with users who are interested 
in the idea, he added. 

Not 


about the turnaround efforts at 


everyone is confident 
J.D. Edwards. This week’s con- 
ference could be a “do-or-die” 
event for the 
Joshua Greenbaum, an analyst 
at Enterprise Applications Con- 
sulting in Daly City, Calif. 
“They've really been struggling, 
and they’re trying very hard to 
turn the corner,” he said. 

The increased commitment 


company, said 


to midsize users is a wise strat- 
egy, Greenbaum said, describ- 
ing that market as 
opportunity.” 

But the OneWorld suite has- 
n’t caught on yet, he added 
And the company’s partner- 
ships with Siebel Systems Inc. 
in San Mateo, Calif. 
mer relationship management 
software and Mountain View, 
Calif.-based Ariba Inc. for 
business-to-business software 


“a huge 


for custo- 


haven’t given it much of a 
boost, Greenbaum said. B 


vice chain but will also be capa- 
ble of fixing it, Azzarello said. 
These capabilities are 
coming increasingly important, 
said Ed Bilewicz, a vice presi- 
dent at 724 Solutions Inc., a 
wireless service provider in 
Toronto. The firm 
OpenView to 
functions like server, router and 
firewall monitoring, as well as 
to manage and monitor applica- 
tion services, Bilewicz said. D 


be- 


is using 


manage basic 


> HP OpenView Service Information Portal 2.0 enables service providers 
to offer customers a personalized view of their own network, systems, service 


and performance information. 


> OpenView Service Desk 4.0 manages configurations, the help desk and 


changes to the infrastructure. 


> OpenView Internet Services 3.5 is an enhanced version of HP's existing 


transaction monitoring software. 


> HP Network Node Manager 6.2 is an enhanced version of existing soft- 
ware that monitors the performance of networks using Cisco technology. 


Nokia Cuts Sales 
Forecast Again 


Nokia Corp. last week cut its busi- 
ness outlook for the second time 
this year, warning that year-to-year 
revenue growth for the second 
quarter will be less than half of its 
original prediction. The Espoo, 
Finland-based maker of cell phones 
and other wireless technology also 
said it’s currently “revisiting” sales 
forecasts for the second half of the 
year because of signs that the 
economic softening in the U.S. is 
spreading. Updated projections are 
due to be released in mid-July along 
with Nokia’s second-quarter results. 


Peregrine to Buy 
Rival Remedy Corp. 


Peregrine Systems Inc., which de- 
velops a mix of asset-management 
and business-to-business software, 
last week said it has agreed to buy 
rival Remedy Corp. in a combined 
cash-and-stock deal valued at more 
than $1 billion based on current 
share prices. San Diego-based Pere- 
grine said the acquisition will match 
Remedy’s base of small and midsize 
users with Peregrine’s enterprise- 
level customers and give the latter 
group access to Mountain View, 
Calif.-based Remedy’s line of cus- 
tomizable applications. Peregrine 
will pay about $275 million in cash 
and issue 27.9 million new shares 
of its common stock to buy Remedy. 


Short Takes 


Sales and customer service soft- 
ware vendor FIREPOND INC. in 
Waltham, Mass.., is laying off about 
190 workers worldwide, or 30% of 
its workforce, as part of a restruc- 
turing. . . . Storage device maker 
1OMEGA CORP. has eliminated 110 
manufacturing jobs at its headquar- 
ters in Roy, Utah, consolidating all 
of its equipment production at its 
facility in Penang, Malaysia. . . . 
Murray Hill, N.J.-based LUCENT 
TECHNOLOGIES INC.’s debt rating 
was formally downgraded to junk 
bond status by New York-based 
STANDARD & POOR'S CORP. 
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print-on-demand speed limit 
to 85 ppm. 


The finishing capabilities like stapling, hole punching, z-folding, and document insertion, a 
click of a mouse. And the renowned Canon reliability. You'll find it all i 
production system, and at an operating cost d 


your profitability. At Canon, we're giving people 


the know-how to handle heavy workloads with the greatest of ease 


1-800-OK-CANON ext. 8500 
it www.imagerunner.com 


CANON Know How 





MARK 


This Piracy Plan 


kill 


NEWS 


HALI 


ICROSOFT HAS DECIDED that its stranglehold on the 
desktop gives it the right to force changes in user behav- 
ior. This is its first egregious, monopolistic act directed 
at its customers. It should be stopped. 


When the company releases Win- 
dows XP, Office XP and other prod- 
ucts, millions of end users will have 
to comply with Microsoft’s Soviet- 
style diktat that forces them to use 
Product Activation. It’s Microsoft’s 
unilateral attempt to fight software 
piracy, a noble cause. An industry 
advocacy group, the Business Soft- 
ware Alliance, purports that piracy 
cost developers $12 billion last year. 
It is a product registration method 
for those who don’t fall under vol- 
ume license agreements. If you don’t 


register the product, it soon cripples itself. 


Aimed primarily at consumers, Product Activa- 


tion will also affect companies that let employ- 
ees buy software direct — or those that buy 
computers through local retail outlets. 


Microsoft says that the data it collects will be 


protected and that there is no ongoing secret 
pilfering of data from your machine. It’s said to 
be a one-time process to connect you, your 
software and your computer as a legal entity. 
Perhaps. But it’s not the privacy issue that 
bothers me. It’s the utter pointlessness of Prod 
uct Activation. Don’t believe me? Here’s what 


MARK HALL is Computer- 
world’s West Coast 
editor. You can contact 
him at mark_hali@ 
computerworld.com. 


Microsoft says about it: “All IP pro 
tection technologies will be cracked 
at some point; it is just a matter of 
time. The measure of success is not 
completely stopping software pira- 
cy. Success is more likely measured 
in increased awareness of the terms 
of the license agreement and in- 
creased license compliance.” (Ital- 
ics added.) 

In sum, there is no real need for 
Microsoft to collect this informa- 
tion. The lofty motive is a sham. 
Product Activation won't do diddly 
to stop piracy, but it will force you to be more 
aware of it. That’s a good enough reason for 
Microsoft to have you waste your time. 

It’s not good enough for me. The over- 
whelming majority of people who use Micro- 
soft’s software abide by the end-user license 
agreement. So why make us change for an ad- 
mittedly flawed and senseless process? Be- 
cause Microsoft is acting like the bullying mo- 
nopoly that it claims it isn’t. 

I suggest we all let our Microsoft sales con- 
tacts hear loud and clear that we don’t appreci- 
ate having our time wasted for no reason. D 
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[raining Strategy 
@ 
RAINING HAS been considered a 
footnote to all the action in the 
. real economy, where competitors 
clash in global markets and IT systems 
are used to enhance customer service. 
But in a telling statistic, companies are increas- 
ingly spending more money on IT training for 
both IT and non-IT personnel. Despite waves of 
layoffs and gloomy economic news, a new IDC re 


port says IT training revenue will increase world- 
wide at a compound annual growth rate of 13%, 


2005. This demonstrates a willingness — and the 
long-term thinking — of many firms to admit to 
the increasing complexity 
of and reliance on the IT 
systems they’ve installed. 
But what kind of IT 
training makes sense? 
First, determine the per- 
centage of training that fo- 
cuses on internal IT func 
tions, on one hand, and 
that will be coordinated, ; 

PIMM FOX is 
Computerworld’s West 
Coast bureau chief. 
Contact him at pimm_fox@ 
computer world.com. 


on the other hand, with 
business partners and cus- 
tomers, some of which will 
be much less tech-savvy 
than you. IT training should encompass a mixture 
of spontaneous, small-scale, real-time issues, such 
as a denial-of-service attack or a power outage, in 
addition to the day-to-day routine of maintaining 
IT. Reacting swiftly to crises is as important as 
fixing mundane e-mail configuration problems. 
Clearly, one-size-fits-all IT training won’t work, 
because you have executives, middle managers 
and factory workers with different requirements 
and levels of expertise. 

Second, don’t be afraid to experiment. 

Because money spent on education and train- 
ing is rarely correlated to direct sales, there’s a 
temptation to play it safe, to do only what you 
perceive as having been successful in the past. 
This may satisfy any training mandate, but it 
won't lead to fundamental improvements in your 
organization’s level of IT expertise. When was 
the last time you simulated a breakdown in IT op- 
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XML Web service is l reli way to blend 


existing systems wi ylications and services 


Microsoft .NET—An XML Web Services Platform 


behind XML Web serv 


SrOWINE 


among developers, Microsoft is building a platform to 


help them write, deploy, and manage these services 


Microsoft NET is that platform. it contains both 


products and services developers need to build and run 
XML Web services, and enables some of the User 
Experiences that demonstrate the integration of XML 
Web services with the universe of computers, smart 
devices, and Web-based services used by consumers. 


Microsoft .NET is optimized for XML and XML Web 


services, but it is by no means the only choice of 
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erations? How long did it take for your IT SWAT 
team to get you up and running? 

With experimentation should come training in 
new technologies such as wireless networks and 
mobile applications. In addition, pursue new 
training techniques like online learning (in North 
America, $15 billion will be spent on online train- 

ig by 2004, according to IDC). 

Finally, view current budget constraints as a 
ime to craft an IT training policy to counter the 
»arochialism born of IT spending in the 1990s. 

IT training can be a unifying theme to enhance 
ndividual skill levels, increase job efficiency and 
mphasize interdepartmental cooperation. With 
1any IT projects scrapped or on hold, it makes 
ood business sense to help workers use what’s 
already installed. D 

JOHN GANTZ 
: 5 ae 
A Little Skepticism 
7 + ° ” 

For IBM's eLiza 

BM CALLS IT “eLiza,” which is short 

for eLizard, a whimsical reference to 

the notion that it would be nice if to- 
day’s computers had the computational 
ability and adaptability of a lizard. 

(In his book The Age of Spiritual Machines, not- 
ed scientist and author Ray Kurzweil estimated 
that IBM’s Deep Blue supercomputer, which beat 
chess champion Garry Kasparov in 1997, had the 
brain equivalent of an adult lizard.) 

Emanating from IBM’s development labs, eLiza 
adds self-management capabilities seen in some 
high-end systems to all IBM computers, down to 
the level of Web and appliance servers. Seli-man- 
igement capabilities include self-configuration, 
self-healing, self-optimization, dynamic workload 
management and self-pro- 
tection. Think about it: no 
taking servers off-line to 
reconfigure them, no sit- 
ting at consoles juggling 
workloads, no constant re- 
action to system alarms — 
less stress all around. 

I buy the rationale. With 
server technology migrat- 
ing to multidimensional 
arrays of processors work- 


JOHN GANTZ is a senior 
vice president at IDC in 
Framingham, Mass. 
Contact him at 


. : ing in ad hoc configura- 
jgantz@idc.com. = bs 


tions on dynamically 

changing workloads, we're going to need a lot of 
built-in capability — the ultimate in plug-and- 
play. If a person has to monitor the comings and 
goings of thousands of servers on jobs that ebb 
and flow in milliseconds, you might as well have 
Homer Simpson running a nuclear power plant. 

IBM’s goal with eLiza is to build into computers 


the equivalent of an autonomic nervous system 
(wherein lies the computational strength of liz- 
ards). Let the computers take care of their own 
housekeeping. IBM already has bits and pieces of 
the necessary technology in products like its Intel 
ligent Resource Director, announced in March with 
the z/OS operating system for its z900 servers, and 
in software rejuvenation tools introduced with its 
x300 thin server, announced last month. 

But can all this disparate technology be knit 
into a single whole that becomes the interopera- 
ble standard for an entire industry? 

I’m skeptical. Over the years, I’ve seen ideas for 
overarching system management schemes come 
and go, such as IBM’s own System Application Ar- 
chitecture and AT&T’s Unified Network Manage- 
ment Architecture. Such schemes never seem able 
to keep up with the expanding universe of com- 
puting devices, vendors, protocols, data types and 
architectures. Their development proceeds at a 
pace much slower than that of market innovations. 

That’s where I see IBM’s challenge. It’s one thing 


to add bits and pieces of high-end technology into 


Look Before You Cast Do 


HEN MICHAEI 

Gartenberg 

talks about ac- 
quisition costs vs. switch- 
ing costs, he makes a 
perfectly logical, though 
entirely misleading, ar- 
gument [“Linux Falls 
Short of Becoming a 
Mainstream OS,” News 
Opinion, May 28]. By 
talking first about the 
low acquisition cost of 
Linux, he sets up an ar- 
gument so weak that 
even he can knock it 
down. He then praises 
Microsoft as though it 
has done something 
good by creating “non- 
substitutable infrastruc- 
ture technologies, 
[which] by definition, 
support high switching 
costs.” Experienced IT 
managers know that high 
switching costs repre- 
sent at best a poor design 
and at worst an extortion 
waiting to happen. The 
real cost that Gartenberg 
should be looking at is 
the long-term cost to run 
and expand a system’s 
capabilities. This is 
where Linux, not Win- 


ri) 


new server products; it’s another to inspire other 
vendors to add the same technology so that 
servers from different manufacturers will someday 
be able to be woven into self-managing networks 

Even if IBM were to make every} 
technology available to others through altruisti 
licensing terms (the company says some I 
all of eLiza will be made available to others), ot! 
er vendors would extend or modify it to provide 
product differentiation, just as they did wi 
gramming languages, Unix | 
open standards 

You, as an IT professional, must 1 
how much of this self-management you want, 
how much you're willing to be beholden to IBM 
to get it and how it will fit with what you get from 
other vendors. After all, how many autonomic 
nervous systems can you have in one body? 

IBM's eLiza targets a complex and difficult prob- 
lem, and the software that will make self-managing 
systems will be both complex and buried dee 
within the system. You'll have to put the gains it 
brings into context for your organization. D 
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ubts on Linux 


dows, really excels. The 
iverage life span of a 
company successful 
enough to make it to the 
Fortune 500 is 80 years. 
Why do companies die? 
Because they can’t 
evolve. Nonsubstitutable 
infrastructure is the tar 
that will trap even the 
fastest-moving dinosaur. 
Michael Tiemann 


OME ESTIMATES 

show that Linux is 

the most-used Unix 
variant, and it’s cited as 
the most-used server for 
Web hosting. The most 
common false assump- 
tion about Linux is that it 
is owned by a company, 
such as Red Hat. While it 
and others do a laudable 
job of packaging Linux 
and have arguably made 
the platform more palat- 
able to big business, Lin- 
ux has much humbler 
roots, created as a tool 
by those who needed its 
functionality and main- 
tained by literally thou- 


sands of programmers A th Di i-d 
And it has no need to nowner Igt ropout 
compete for the No. 1 HANKS, Russel 


spot on the desktop be- Kay, for givin 


cause it can’t go bank- digital c 


‘ame 
rupt or cease tot 

ported on future hz 

ware. As long as there 

are enthusiasts and tal 

ented programmers 

working to solve prob- 

lems, it will continue to 
evolve and grow 

Adam Delu, M.D. 
University of Texas, H 
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tages of replaci 

Windows on tl 
desktop are stability 
security. While clai 
can be made that Win 
dows 2000 is more stable 
than its predecessor, NT 
4.0, it took two service 
packs to get where it is 
today. Linux has operat- 
ed 24/7 for several years 
And Windows is much 
more of a security risk to 
its users than Linux. Yes, 
there have been attacks 
against Linux, but noth- 
ing near the hacking into 
Windows. 
Les Hartzman 
Sherman Oaks, Calif 
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Bad Legislation 
Opens Web to 
Corporate Lawyers 


RECENTLY finished a very funny 
novel by syndicated columnist Dave 
Barry called Big Trouble. The action 
takes place in Miami, where my mother 
lives, so I decided to send it to her when 
I was done with it. She'd really get a kick out of it. 
Good thing the book was on good, way-old-fash 
ioned paper, and not digi- 
tal. If this had been some 
kind of e-book, all kinds 
of obnoxious code would 
have prevented me from 
letting her read it: It would 
have worked only on the 
device on which it was 
originally downloaded. 
How do they justify this 
ALEX TORRALBAS is an ? : 
independent IT consul- 
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nonsense? Because of the 
worst piece of legislation 
to affect the free flow of 
information: the Digital 
Millennium Copyright Act. 

his stinking hunk of law makes it illegal to do 
something that’s been legal for longer than almost 
anyone reading this column has been alive. Its 
essence is that you can’t make copies of anything, 
for any reason, period. No more making compila- 
tion tapes of your favorite party songs or photo- 
copies of articles to hand out at a meeting. 

MP3.com, Napster and 2600 Magazine have all 
recently lost court battles when they were con- 
fronted by lawyers waving this piece of legislative 
junk at them. Little of what the media conglomer- 
ates are doing in their take-no-prisoners litigation 
has anything to do with copyrights or protecting 
themselves from pirates. It has to do with being 
able to dominate distribution and marketing. 

The $ 
wreaking havoc on our rights and placing absurd 


nie is out of the bottle on this one, 


roadblocks in the way of progress. 

The 2600 Magazine case was especially trou- 
bling. The company was barred from providing 
even a hyperlink to a server in New Zealand that 
contains source code to bypass some of the re- 
strictions on DVDs. A hyperlink. That’s like mak- 
ing it illegal for me to say, “They sell drugs on 
that street,” because, to use the tortured logic 
from 2600 Magazine's case, merely giving this 
pointer is as illegal as actually selling drugs. 

The Recording Industry Association of America 
(RIAA), the group representing the major record- 
ing labels, hid behind a sanctimonious argument 


NEWS 


that Napster would turn Madonna into a pauper 
if left to its own devices. The RIAA's real aim was 
to protect the business of selling overpriced plas- 
tic through near-monopoly distribution channels. 
One of the more idiotic and sad items to come 
out of this particular saga had the RIAA demand- 
ing that the quality of MP3 recordings be inten- 
tionally degraded to way below CD quality to 
force people to want the real thing. 

Between corporate lawyers torturing the intent 
of legislation and law and the unmitigated greed 
of media companies, the future of “e” anything 
that currently exists on paper or plastic is being 
smothered in its cradle. 

But, sadly, the media conglomerates now own 
the product and much of the hardware and soft- 
ware, sO expect more stupidity to make it to court. D 


Demand Better 
Tools for Your 
Legacy Systems 


HILE ATTENDING the recent 


JavaOne show in San Francisco, 


I was impressed with the de- 
gree to which development technologies 
have evolved. Developers have access to 
tools that didn’t exist a few years ago. 
These tools increase the efficiency and effective- 
ness of systems analysts, designers, developers 
and testers, which in turn benefits the business 
community. 

Unfortunately, most of these products focus on 
newer languages and provide little support for 
legacy environments and the business units that 
rely on older applications. 
IT must demand more 
sophisticated tools that 
address legacy application 
challenges, or businesses 
will ultimately suffer. 

The gap between the 
tools available for newer 
languages such as Java and 
those available for legacy r 
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applications written in 
languages such as Cobol is 
striking, given the size and 
significance of legacy ap- 
plications in businesses. 
For example, there are roughly 180 billion lines 
of Cobol code today [News Opinion, “Remember 
Cobol? If You Don’t, Get Reacquainted,” May 21], 
which account for the largest percentage of code 
in corporate business systems. And programmers 


COMPUTERWORLD June 18, 2001 


continue to write more Cobol code to support 
new requirements. A recent eWeek article quoted 
Gartner as saying that 5 billion lines of Cobol 
code will be created annually over the next four 
years. 

These statistics highlight the importance of 
older languages, such as Cobol, in delivering new 
functionality and supporting existing business 
capabilities. But what kinds of tools should ven- 
dors focus on for legacy applications? The Java 
community provides some answers. 

Java development tools include code genera- 
tors, intelligent editors with built-in wizards, 
logic-tracing tools and debugging facilities. 
Modeling tools augment these products by 
allowing analysts to create design models that 
feed specifications into development products. 
These tools are part of integrated development 
environments that synchronize business models, 
specifications and program logic across the de- 
velopment cycle. 

For example, a designer can change a business 
rule in a design model and can have that change 
reflected in the system source code. A coding 
change would also be reflected within a design 
model. Model-driven development and mainte- 
nance is a very effective and efficient way to 
evolve systems over the long term. 

Companies can also mix and match tools from 
different vendors and can retain much of the in- 
teroperability between design and development 
products. These accomplishments represent a 
quantum leap in delivering quality systems in 
time frames that are much shorter than what was 
available a few years ago. 

IT needs similar capabilities for legacy envi- 
ronments because the programmers who under- 
stand them are scarce. At JavaOne, a Sun exe- 
cutive said there are more than 2.5 million Java 
developers working today. By contrast, according 
to the eWeek article, Gartner says there are only 
90,000 Cobol programmers working in North 
America today, and that number is shrinking 13% 
annually. 

There are too many critical legacy applications 
and too few skilled technicians to work on them. 
As an industry, we must increase the effectiveness 
of the remaining legacy programmers through 
better analysis, development, upgrade, debugging 
and componentization tools. To accomplish this, 
IT must demand better tools from vendors. 

Several vendors, some of which also market 
Java development tools, have products with lega- 
cy capabilities. But most are reluctant to promote 
them for fear of being typecast as being stuck in 
the past. 

Cobol and other legacy applications aren’t 
going away anytime soon, and they will continue 
playing an important role in business for years to 
come. Insurance, financial, health care and other 
legacy-dependent industries will want to invest in 
these systems accordingly. D 
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HOLLYWOOD 


DREAMS 


What’s it like to work in 
IT at DreamWorks’ pro- 
duction studios? You 
may get the chance to 
mingle with stars, and 
the gig could even open 
some doors into pro- 
duction work. But sup- 
porting Hollywood egos 
can create a political 
landscape that’s tough 
to navigate, warns IT 
director Jeff Gelb. » 30 


CELEBRATING 


DIFFERENCES 


Diversity is about more 
than color and gender. 
It’s about all the differ- 
ences that make us 
unique in terms of 
lifestyles and chal- 
lenges, as well as skills 
and contributions. Nur- 
turing those differences 
has been the key to suc- 
cess for several of Com- 
puterworld’s picks for 
the Best Places for 
Diversity. » 32 


STRETCHING 


YOUR DOLLARS 


As technology budgets 
come under increasing 
scrutiny in this tough 
economy, industry prac- 
titioners say total cost 
of ownership shouldn’t 
be measured in dollar 
terms alone. There’s 
also service quality and 
business value to con- 
sider. » 36 
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THE BEST PLACES TO 
WORK FOR BENEFITS 


SUCCESS ON THE JOB shouldn’t require the sacrifice of success in 
one’s personal life — a philosophy shared by all of the companies 
on Computerworld’s 100 Best Places to Work for 


Benefits list. So offerings aimed at helping people 
achieve work/life balance, such as flexible work 
schedules and child care, are mainstays of the top 


benefits packages. 
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ORKSTYLES 


Behind the Lights, Camera and 
Action at DreamWorks SKG 


Interviewee: Jeff Gelb 


lire tor of IT 


Company: DreamWorks SKG 
an anitr -Tim and 
television prod company 
Main location: Glendale, Calif 
Number of IT employees: 75 
n the IT group, plus about 60 in 
animation technology 
Number of employees (end 
users): 1,800 worldwide 
important systems: “Our the 
atrical distribution and 

sales system. It's how we 

track product placement 

ina sense. We have 

4,000 or 5,000 

Shrek, and theaters pay 

us Dy how many 

they show the fil 

we Can track ticket 

Sales and gross Dy 

theater, by cf 


reaior 


ease What It's Like 
Wescn To Workat..... ies ennications us 


yroposed sc 
mail those out to script read- 
mail us back their 
;, and all of those are 
d via the system to en 
o make greenlight 
hose tools aren't 


sould potentially 


who € 


omments 


S are shopped 


e studios, and 


potential revenue 
Does the IT group come into 
contact with celebrities? “It 
The group that follows 
they were 
Fiji for Cast Away, for 
j had a lot of con 
mHa And | have 


vho's dedicated to 


ns does - 


mpany execu 
erg, Jeffrey 
avid Geffen] 
star con- 
en here three 
yee and | ve never even met 
Steven.” 
What kind of pressure does 
a film release put on IT? 
“System uptime becomes a pre 
mium. If that distribution and 
sales system goes down, we 
lose money. . .. We release 


eight to 12 films a year.” 
What's unique about the 
day-to-day environment in 
entertainment industry IT? 
“It can be difficult to navigate 
the political landscape. Every 
one thinks their proje 
be th attitude 
the enter 


idustry, and name 


that runs througf 
tainment 
dropping is pervasive, and you 
have to figure out who really 
needs something now and 
who can wait.” 
How many IT em- 
ployees are trying 
to sell screenplays? 
“It seems that every 
is, at some time, try 


IT training on tap 
this year: “Windows 
2000; Versata, a new 

applications develop 


ment too! that gener 


g busines 

and some [IT staffers] are going 

Classes so they 

j what their users 
are doing 
Compensation and bonuses: 
“It's comparable to IT salaries 
across other industries.” 
Workday: “It's typically eight to 
10 hours, with an average start 
time between 8:30 and 10 
[a.m.] The he s on from 
7 07 [p.m.] If you're in IT 
support for a [film or TV] pro- 
duction, you re under the gun, 
and you may be working 12- to 
16-hour days. If you support S 
K and G, you're on call 24/7 - 
when they need you, you're 
available.” 
Percentage of staff that 


fam ]to 
gG-tet. J 


: telecommutes on a given 


day: “From an IT perspective. 
it's an on-site job.” 


: In-house cafeteria/food ser- 


vice: “Yes, and breakfast and 
lunch are served free to all em- 
ployees 

Would employees feel com- 


: fortable e-mailing Spiel- 


berg, Katzenberg or Gef- 
fen? “| would say yes.” 
- Leslie Jaye Goff 
(lgoff@ix.netcom.com) 
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ED YOURDON 


The Joy of Mentoring 


T A RECENT convivial lunch, Jerry Weinberg related 
the story of a consulting client who had just finished 
reading his book The Psychology of Computer Program- 
ming (Dorset House, 1971). “You must have written that 
book about me,” the client remarked. “One of the 
episodes in the book sounded just like my last project.” 
“How old are you?” Weinberg asked. The response: “23.” 
“That book was written several years before you were born,” said 
Weinberg. “I don’t think that episode could have been about you.” 


Several of us at the lunch table had also pub- 
lished books in the early ’70s, and we all agreed 
that the response from today’s generation of IT 
professionals is typically, “Did you old guys ac- 
tually know all that stuff way back then?” 

Today’s young IT professionals and managers 
seem vaguely suspicious when we reassure 
them that the same problems that occurred 
“way back then” occur now and that the same 
basic principles of software design and project 
management that applied then apply now. 

If you’re a longtime IT professional, you may 
find yourself in a position of playing an enor- 
mously important role in the IT profession: 
mentor. It’s not a role any of us train for. And 
with rare exceptions, it’s not one that our em- 
ployers recognize or support. 

But to whatever extent there are lessons and 
guidelines that can be passed on from one gen 
eration of IT veterans to the next, mentoring 
may save companies untold millions of dollars 
in wasted costs and failed projects. 

Technical mentoring is frustrating and largely 
unappreciated because of the staggering 
changes in hardware technology over the past 
40 years. Today’s programmers, equipped with 
256MB desktop computers, don’t want to hear 
about the amazing things we did 
with our pitiful little 4kB machines, 
and they don’t want to hear about 
our decades-old experiences with 
such au courant concepts as proto- 
typing. 

But managerial mentoring is more 
successful. After all, the politics of 
dealing with headstrong program- 
mers and demanding users are the 
same today as they were 40 years 
ago. Today’s jaded, battle-scarred 
veterans were once just as naive and 
idealistic as the current generation of 
dot-com kids — the ones who believe 
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the Internet can bring about world peace and 
universal prosperity. 

Here’s some advice for prospective mentors: 
Offer advice when it’s requested, but don’t 
make judgmental criticisms of a fledgling man- 
ager’s decisions. Don’t react to a current IT sit- 
uation by telling a war story from the early ’60s. 
Your pupil is likely to mutter to himself, “I’ll bet 
they didn’t even have electricity way back 
then.” Instead, offer a low-key, nonjudgmental 
prediction of the likely outcome, taking into ac- 
count your student’s managerial/political situa- 
tion, and allow him to decide whether to ex- 
plore your prediction in more detail. 

Chances are he won't, and the prediction will 
be forgotten. 

But if your prediction comes true — if, for 
example, a senior executive’s heavy-handed, 
short-sighted decision leads to disaster — then 
your pupil is likely to come back to you and re- 
mark in an awed voice, “It’s working out just the 
way you described. How did you know things 
would turn out this way?” 

And then you can relate your war story about 
the good old days, and tell him about the 10 
occasions in your career when you saw the 
same managerial faux pas and discuss the 
lessons that can be gleaned from 
such experiences. 

And when you offer a prediction 
about the next impending manageri- 
al disaster, there’s a good chance 
that your student will listen atten- 
tively and begin asking questions. 
And perhaps you can help prevent a 
disaster or two, which may be far 
more productive than trying to ex- 
plain why you could have built the 
same software in your old 4KB 
machine that your pupil is strug- 
gling to build with today’s massive 
hardware technology. D 
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ICK AND CLICKS 
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won't change quickly, even as your 


replaces an- business opportuniti 


a huge advance in the things 


the technology is supposed to accomplish? Instead, we 


get the worst aspects of both old and 


F’rinstance, I noticed a gee-whiz 
Boston Globe article the other day 
about a local grocery store using a 
computer-enabled shopping cart. An 
onboard touch-screen unit maintains 
a running total on everything the 
shopper buys, locates items he can’t 
find, offers promotions in the aisles 
he’s passing through and reminds 
him to pick up things he’s bought be- 
fore but may have forgotten this time. 

On the surface, it sounds like the 
thing eliminates many of the head- 
aches of hunt-and-shop grocery 
grubbing. But by layering technology 
on that ancient process, isn’t it com- 
bining the worst of the 
two? Minimal conve- 
nience plus a complete 
loss of privacy for the cus- 
tomer, with minimal 
added benefit to the store, 
which has to buy the new 
technology to gather in- 
formation it gets at the 
checkout counter anyway. 

There's a similar bad 
trade-off with a new 

Contact him 
Internet technology 
called Surge being put 
together by Curl Corp., a Cam- 
bridge, Mass.-based start-up backed 
by Web inventor Tim Berners-Lee. 

Developers use a proprietary lan- 
guage called Curl to build into Web 
pages small programs that are easy 
to download. The Surge plug-in 
compresses and decompresses data 
i anges with the server. 

That makes pages faster and 
glitzier — if the processing doesn’t 
take too long and if the user has the 
plug-in. And that’s assuming that the 
interactivity isn’t just as easy to get 
with easier scripting tools. 

Plus, you get to surrender all your 
computing resources and network 
access to the first hacker to figure 
out how to make Surge code mali- 
cious. It’s the Web’s insecurity plus 
the rigidity of client/server. 

Worst-of-both-world innovations 
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ew technology 


like that are why I have strong doubts 
about the ultimate success of most 
attempts to add front ends that web- 
ify or otherwise spruce up the lega- 
cy applications that still do the bulk 
of the heavy lifting in IT. 

Last week, Computerworld report- 
ed on an effort by the Navy and Ma- 
rine Corps to link more than 300 fa- 
cilities around the world into a single 
$6.9 billion intranet [News, June 11]. 
One hang-up is the number of legacy 
applications involved: tens of thou- 
sands, running all over the world. 

The good news is that the project 
has already uncovered as many as 50 
redundant versions of 
some apps that can be 
retired. The bad news is 
that there will still be a 
mess of legacy apps on 
that intranet even after 
they’re gone. 

And that’s typical. In 
fact, a whole microindus- 
try of consultants and 

grators has sprung 
up specifically building 
what they call “sell-side” 
/ e-commerce 
story, page 52). Their primary pur- 
pose is to act as middleware con- 


at kevin_ 


tems (see 


necting shiny new Web commerce 
applications to the grungy, idiosyn- 
cratic internal applications that run 
the business. 

It sounds like a simple, or at least 
a sensible, way to solve a problem. 
But the inherent assumptions in 
that approach are that you shouldn’t 
significantly change the underlying 
applications and that adding a layer 
of unknown technology between the 
quirky legacies and the untested 
Web apps is a good idea. 

It’s not. Instead of a new way of 
doing business, what you get is more 
momentum for legacy applications 
that should probably be on their 
way out. Once you’ve spent a ton of 
money to connect legacy apps to the 
Web, it’s far easier to tweak the mid- 


and Sendmail. 


dieware than to redes 
lying apps to be more responsive to 
changes in your business processes. 
That means your business processes 


> do. 
Sometimes it make 


n the under- to layer new technology on an old 


process to get some advantage out of 
what’s new without the trouble of 
changing what’s old. But more often, 
you'd be better off with a clean 
break — instead of getting stuck 


sense to try with the worst of both worlds. Dd 
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IALLO NOEL, WHO 
y is black, was a 

certified comput 
a er technician 

with no degree 
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and five months 

of fruitless inter 

views behind him 
when he arrived at Public Broadcast 
ing Service last year to interview for a 
help desk job. After two technical in 
terviews, he was surprised to be ush 
ered into CIO Andre Mendes’ office 
Swe Mendes “did something no one ever 


did,” Noel recalls. “He said, “Tell me 
about you.’ I'd been waiting five 
months to talk about myself. Andre felt 


my passion for the industry, and it was 
just a click.” 

Noel has been moving up ever since. 

I’ve felt appreciated, and that’s 
pushed me to work harder,” he says 
Noel is currently a messaging support 
administrator at PBS’s 642-member IT 
department and is working toward his 
certification as a network engineer. 

The key is looking to people’s fu- 
tures rather than their pasts, says 
Mendes, who has since become chief 
operating officer/chief technology offi- 
cer at Pluvita Corp., a biotech start-up 
in Bethesda, Md. 

“We focused on potential, work ethic 
and ability to work well with others 
rather than [on a] degree,” he says. 
“The moment you do that, you are 
bound to find the talent. Open the 
door and they will come through it, be- 
cause people are out there.” 

Diversity is about more than color 


and gender, although that’s how it’s 
frequently measured. It’s about all the 
differences that make us unique in 
terms of lifestyles and challenges as 
well as skills and contributions 

It’s about technical analyst Francis 
Head being able to get into the guts of 
150 servers at Atlanta-based Georgia 
Pacific Corp. because somebody made 
sure they’re all low enough for him to 
access from his wheelchair. 

It’s about Rachelle Byars, a business 
analyst at Alexandria, Va.-based PBS, 
noticing during an important IT meet- 
ing that there wasn’t a single white 
face in the room. 

It's about Joelle Paris, a new mother 
and IT business relationship manager 
at Royal Caribbean Cruises Ltd., keep- 
ing her career on track while scaling 
back her workweek to spend more 
time with her baby. 

Noel made his own success, but PBS 
provided the environment and struc 
ture to let it happen. While at the help 
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desk, Noel was given access to com- 
puter-based and outside training. He 
was also informally mentored by Orin 
Love, a black man who had started at 
the help desk and had moved on to be 
come an e-mail administrator. 

“Not only did Orin want his friend to 
succeed,” explains David Shomette, di- 
rector of IT administration at PBS, 
“[Orin’s] success was based on Diallo 
taking over Orin’s day-to-day responsi 
bilities so that Orin could go to the 
next level. A rising tide lifts all boats.” 

Teco Energy Inc. took a chance on 
David Gondreau in 1984, and it has 
paid off. A systems analyst who is 
quadriplegic, Gondreau came to the 
Tampa, Fla.-based firm as an intern 
and stayed. That longevity isn’t unusu- 
al in the 173-person IT department, 
where the average tenure is 12 years. 

“They have never had someone with 
such a high disability as mine, so it was 
a learning experience on both sides,” 
Gondreau says. “But my disability is 


Best employers know that nur- 
turing a diverse IT workforce re- 


quires sensitivity, flexibility, out- 
reach, two-way communication 
and a willingness to take risks. 


DIVERSITY 
PAYS OFF 
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essentially a nonfactor; they just make 
accommodations when I need them.” 
hose include flexible work sched 

ules, special parking, elevators and au- 
tomatic doors in restrooms and easily 
iccessible water fountains. 

But Gondreau says Teco’s employees 
The folks here are 
just fabulous,” he says. “I have had 


go the extra mile. “ 


health problems, and sometimes my 
teammates from work have even come 
over and stayed with me after opera- 
tions if my family isn’t around. It’s 
more than just work, its family.” 


Learning to Listen 

In many of the Best Places to Work, 
diversity is so much a part of life that 
employees take it for granted. 

“I’m from Colombia,” says Alma 
Emerson, a systems project manager at 
Florida Power & Light Co. in Juno 
Beach. “In my group, I have folks from 
India, Jamaica, Cuba, Russia, Panama, 
and we have African-Americans and 
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lop 10 Best Places to Work in IT for diversity 


% of female IT % of female IT Sts a Ses ae 
® 
1 31 44 52 54 


Royal Caribbean Cruises Ltd. 
Georgia-Pacific Corp. 
Florida Power & Light Co. 
PBS 

Teco Energy Inc. 

Freddie Mac 

The Home Depot Inc. 
Nationwide Insurance Cos. 
Harrah’s Entertainment Inc. 
USAA 


Sc ea nouk won 


an Anglo-American,” she says. “We say 
we are a United Nations, and there are 
a lot of teams here like us. We have 
great group dynamics. There is no ma- 
jority, so there are no minorities.” 
“Diversity is not really a project, it’s 


DAVID GONDREAU, a systems 

analyst at Teco Energy, says his fellow 
employees have been very understanding and 
supportive of his needs as a quadriplegic: 
eM CRU m lg Onl ee) a 


an attitude,” says Dennis Klinger, vice 
president for information management 
at Florida Power, where the average 
tenure in IT is ll years. 

“We're sensitive that sometimes you 
have issues [with diverse workforces], 
so people are aware and, most impor- 
tant, we’re receptive to listening and 
taking action. We try to make it an 
open environment so things don’t get 
to the problem level before they get 
discussed,” says Klinger. 

But it takes more than sensitivity. 
There's a lot of work behind the di- 
verse environment that Florida Power 
employees take for granted. That in- 
cludes a diversity awareness program 
with training on various levels, includ- 
ing training in diversity leadership, 
which is a stated core competency for 
managers. There are also minority- 
targeted recruiting, scholarship and 
internship programs and mentoring 
programs, as well as human resources 
specialists who meet regular- 
ly with new hires to be sure 
their careers stay on track. 

Later in their careers, 
Klinger’s lead team takes 
over. “You really have to 
work on people in the low- 
er/middle levels to make sure 
they don’t get lost,” he says. To that 
end, the management team nurtures 
high-potential people, including mi- 
norities, Klinger says. 

“My lead team of direct reports and I 
get together and say the names out 
loud and talk about these people as a 
group,” Klinger says. They ensure 
there are no barriers to their success, 
give them special training as needed to 
move them along and assign them to 
projects where they can make a name 
for themselves. “It’s not science, but it 
works,” Klinger says. 

In Cuban communities, family is 
everything — which can cause some 


ee 
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1 demand a 
family is what life i 
says Juan Lopez. He had been a dat 


architect at Miami-based 


Roya 
Caribbean less than a year \ 
had to choose between ke 
and resolving a family prob 
quired a move to Wash 

But when he sadly tolc 
Max Schmidt, 


Schmidt made some quick phone 


about the situatior 
then told Lopez, “If you war 
with us, we'll work with y 

Royal Caribbean set 
work remotely. “Tha 
thing I expected. It’s a hag 
he says. “In about a year, I'l 


Lopez’s happy ending is larg 


to the leadership of Tom Murphy, CIO 


at Royal Caribbean. “I have a philoso- 


phy that we all have real lives, and our 
management team needs the maturit\ 


and wisdom to tre 


flexibility,” he says. “If some- 
one’s baby is sick, you know 
they’ve got to do what they’ve 
got to do.” That applies to 

work as well as personal chal- 
lenges, he adds. 

Nurturing differences is the only 
way to go in the cruise business. “Our 
whole operations, our everyday life is 
about this,” says Bernard Gay, vice 
president of enterprise technology and 
operations and a black man who hails 
from the Bahamas. 

“We have people from well over 50 
countries, and because IT is so im- 
mersed in the business, we find our- 
selves immersed in a blend of national- 
ities,” Gay says. “Our daily interaction 
forces diversity and understanding of 
how you need to be with diversity. It 
forces you to live the culture.” D 
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O THE CASUAL ob 
server, Richard 
Wight’s Fridays 
may seem anything 
but exciting. A trip 
to the local Home 
Depot. A stop at 
the town dump 
Some work on the addition he’s putting 
on his home. 

But it’s the very tedious nature of the 

iy that makes it so exciting for Wight, 
i stage management administrator at 
State Street Corp. in Quincy, Mass 
Thanks to Boston-based State Street’s 
flexible schedule benefit, Wight works 
from 6 a.m. to 4 p.m. Mondays through 
Chursdays and takes Fridays off. So 
Fridays have become errand days, 
which frees up Saturdays for relaxing 
family activities, such as coaching his 
son’s soccer team. 

1 parent’s a one-shot deal, so 
you get it right the first time,” says 
Wight. A great attitude in theory. But 
for most people, it’s not as easy as it 
sounds. As work demands increase, 
many struggle to find enough time to 
spend with their families. It seems to 
be a problem that each of Computer- 
world’s Top 10 Best Places to Work for 
Benefits are trying to address in their 
benefits packages. 

Flexible work hours, telecommuting 
and family-friendly offerings such as 
adoption assistance, domestic partner 
benefits and child and elderly care are 
among the benefits that the best places 
to work offer. They also offer time-sav- 
ing services, such as on-site conci- 
erges, dry cleaning, oil changes and 
cafeterias that prepare dinners to go. 


Companies must also be practical, 
and the fact remains that money talks. 
Stock options, matching 401(k) contri 
butions and bonuses are mainstays at 
top employers such as UnitedHealth 
Group Corp. and Lockheed Martin 


Management & Data Systems (MD&S). 


And despite the slowing economy, 
these companies have all made bene 
fits a top priority that doesn’t fall vic- 
tim to company cutbacks. 

The costs can be significant, but the 
payoff can be even greater. At Freddie 
Mac, for example, the turnover rate is 
an uncommonly low 7.2%. 

“Freddie Mac believes the rewards 
of working here are made up of three 
things: Your compensation, benefits 
und the work experience,” says Laurie 
Dalton, director of benefits. “We're an 
environment that understands the var- 
ied needs of our employees.” 

The McLean, Va.-based financial 
services firm offers a laundry list of 
benefits, including one that is starting 
to become a staple of many packages: 
lactation rooms where women can pri- 
vately breast-feed or pump milk. 
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The company also offers new moth- 
ers a free consultation with a lactation 
expert, gives new parents beepers and 
has highchairs, coloring books and 
crayons in the cafeteria, according to 
Laurie Dalton, director of benefits. It’s 
all a part of the family-friendly envi- 
ronment Freddie Mac works to foster. 
“You see children a lot,” she says. 


Culture Club 


At CDW Computer Centers Inc. in 
Vernon Hills, Ill., the customer doesn’t 
come first. Employees come first. That 
philosophy is what Art Friedson, vice 
president of co-worker services, calls 
the circle of service: If we all take care 
of our co-workers, they'll take care of 
our customers, he explains. 

In order to create such an environ- 
ment, CDW’s IT department goes to 
great lengths to build camaraderie, 
says Executive Vice President and CIO 
Jim Shanks. That’s where activities 
such as WhirlyBall come in. Once or 
twice a year, the department dukes it 
out for the WhirlyBall title, with em- 
ployees hopping into bumper cars, 


It’s getting more costly for top em- 
ployers to stay ahead of the com- 
petition with their benefits pack- 
ages. But they know large invest- 
ments in employee perks will reap 


huge payoffs. 


BET TING ON 
BENEHTS 
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wickets in hand, trying to whack a 
whiffle ball into a basketball hoop. 

“Some people are great at scoring, 
other people are just great at hitting 
everyone,” says Shanks. And the next 
day, everyone comes in “just bruised 
and battered with the hugest smiles on 
their faces.” 

Activities are also an important part 
of the benefits package at State Street. 
The company regularly gives employ- 
ees discounted tickets to sporting 
events and theme parks. With an IT 
department of 2,800 people, such to- 
kens go a long way toward making the 
workplace feel a little more personal, 
says Amy Gutschenritter, senior vice 
president of IT governance. 

“You have to see 1,500 State 
Streeters sitting in the bleachers at a 
Red Sox game,” says Julie Haskell, 
manager of work/life. 

Because of the nature of its industry, 
Minnetonka, Minn.-based United- 
Health offers a long list of health and 
wellness benefits, such as an employee 
assistance phone and e-mail service 
through which workers can get 
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Best Places to Work in IT for benefits 
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UnitedHealth Group Inc. 
Charles Schwab & Co. 
State Street Corp. 

CDW Computer Centers Inc. 
FedEx Corp. 

Freddie Mac 


Nationwide Insurance Cos. 
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Prudential Financial 
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around-the-clock advice from nurses. 
Sabbaticals, personal leaves and ma- 
ternity and paternity leaves are also 
popular. One benefit that Freddie Mac 
IT project manager Judy Lubnow says 
she’s grown to love is the ability to buy 
extra vacation time, with equivalent 
compensation deducted from her pay- 


SMa eee Rul cule 
takes advantage of his employer's 
flextime benefit to work on his house. 


Lockheed Martin Management & Data Systems 


Benefits offered by the 100 Best Places to Work in IT 


401 (k) 
Flexible hours 
College tuition reimbursement 


Employee assistance programs 


Individual employee performance bonuses 
Employee referral bonus program 


Offering/paying for continuing/executive education pr 


Pretax spending accounts to pay for uncovered medical expenses 


On-site cafeteria 


Reimbursement for technology certification 


Telecommuting options for employees 


Paid family leave 


On-site fitness center or fitness membership reimbursement 


Profit-sharing or employee stock ownership program 


Comp time for overtime hours worked 


checks. That lets her have five weeks a 
year away from the office. 

State Street has a similar program. 

Prudential Financial not only offers 
a leave after an adoption, but it also 
gives time off during the adoption 
process, says Dave Fitzgerald, vice 
president of human resources for oper- 
ations and systems at the Newark, N_].- 
based company. 

Prudential doesn’t just pay lip ser- 
vice to work/life balance, says Fitzger- 
ald. The company rewards employees 
who do an exceptional job at balancing 
work and life. Rewarding those who 
coach their kids’ sports teams or vol- 
unteer to serve on their town govern- 
ments’ boards, for example, sends a 
message to the entire staff that person- 
al time is important 

“I think it starts at the top,” Fitzger- 
ald says of the emphasis on work/life 
balance at Prudential. “It just spreads 
throughout the leadership 
and down to everybody at 
Prudential that this company 
cares about who they are.” 

At Freddie Mac, the IT de- 


Read about 


foe t 
exect 


MOREO 


Sondra Barbour, a 15-year veter 
the company. MD&S gives al 
agers a 13-module course spat 


nine months, which, 


says B 
helped her move up throug 
to her current position as m 
e-transf ation 
Leadership training d 


efit those who move t 


I 
| 1 14 
ilso helps build morale, say 


nt of human 


per, senior vice preside 
capital at UnitedHealth. “I 
people identify with compan 
says. “I think people ide 
ple,” so having mar 
er employees goes a 

Two secrets behind m« 
benefits packages are regu 


ee surveys and informal conve 


with workers. State Street 


idded domestic p 
cause of comments ft 
CDW decided t 
based on 
NLINE focus groups th 


runs for new m 


gs that 


partment helps manage the 
ever-evolving benefits pack- 
age. This spring, the compa- 
ny rolled out a Web portal with details 
about all the benefits that workers re- 
ceive, or, as Dalton puts it, the total 
value of working at Freddie Mac. 

Training is another popular offering. 

“What we found ... is that critical to 
the IT person is the quality of their 
leadership,” says Pamela Hansen-Har- 
gan, vice president of human resources 
at King of Prussia, Pa.-based MD&S. 
The company has a number of techni- 
cal and leadership development pro- 
grams as well as roundtable and one- 
on-one mentoring relationships. 

“The leadership training they’ve of- 
fered me has been tremendous,” says 


/bestbenefits 


www.computerworld.com 


peopl not bi 


pensive things,” says Fried- 
son, pointing out that some 
the most popular offerings include free 
on-site dry cleaning and employee dis 
counts at stores and restaurants 


rhe top 10 also look closely a 


They also work with outside consul- 
tants and human resources associa 
tions to get new ideas. 

But, says Jim Hudack, CEO of Unit- 
edHealth’s technology division, offer- 
ing the right benefits is not rocket sci- 
ence. An organization just needs to lis- 
ten to its employees. “And our IT peo- 
ple are not shy about saying what they 
think,” he says. D 
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Measuring total cost of ownership in dollar terms alone 
doesn't cut it anymore — ser\ ice c Juality and business 
impact must also be factored in. By 


ALCULATING TOTAL 


of ownership (TCO) in raw 


COS! 


dollar terms alone may not 

be the best way to deter- 

mine the costs of IT proj- 
ects at atime when technology budgets 
ire coming under increasing scrutiny. 

Instead, say industry practitioners, 

it’s more effective to tie the cost to the 
service quality and business value 
that’s delivered by 


application 


a technology or an 


when conducting a cost 
analysis for a new desktop system, 


For instance, 


make sure not to focus on just the 
hardware, software and support costs. 
Instead, factor in how the technology 
can cut systems management costs or 
improve transaction times. 
“TCO is a key measure,” says Rod 
Hal, a vice president at IT and busi- 
ness consultancy Compass America 
Inc.’s C 
part 


hicago office. “But it offers only 
of the view of the services I offer 
and the cost of that service.” 

A more useful approach is to mea- 
sure the cost of ownership for the 
level of functionality or service quality 
that’s being delivered by an IT organi- 
zation to a business department or 
user community, says Hal. 

“I first need to understand the ser- 
vices I provide my users, and I need to 
understand the unit costs for that ser- 
vice,” he says. 

TCO is receiving renewed attention 


t atime when IT managers are com- 
ing under increasing pressure to trim 
operational costs. TCO studies are 
aimed at helping managers understand 
the costs associated with acquiring, 
supporting and maintaining a technol- 
ogy over time. This includes hardware, 
software, network, development, sup- 
port and labor costs. 


Looking Beyond the Obvious 


The real value in TCO is in tying 


such cost analyses to business benefits, 


says David Ehrman, manager of busi- 
ness information systems at Schneider 
Automotive Inc., a North Andover, 
Mass.-based subsidiary of France’s 

$11 billion Schneider Electric SA. 

Schneider, which manufactures 
programmable logic controllers for 
manufacturing equipment, recently 
launched an extranet that enables 
more than 2,000 global employees to 
access a common database containing 
more than 4,000 product brochures, 
technical documents, installation man- 
uals and training materials. 

Previously, gaining access to such 
information meant knowing where to 
look or knowing the people who had 
quick access to the information across 
the enterprise. 

Hardware and software costs were 
only a small portion of the cost analysis 
for the project, Ehrman says. Instead, 
most of the effort went toward identify- 
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Thinking of deploying a 
new technology? Wish to 
measure TCO on an existing 
one? Want to know how to 
Wi price your IT services? 


The following are some of the costs 
you should be measuring, according 
to users and analysts: 


THE OBVIOUS COSTS 
> Hardware 


> Packaged software license fees 
> Personnel 


> Hardware and software deploy- 
ment 


> Support and service 

> Custom application development 
> Upgrades 

> Energy and space 


THE NOT-SO-OBVIOUS COSTS 


> System downtime in terms of lost 
opportunities, productivity 


> Being locked into a technology 


> Moving to other technologies and 
platforms 


> Having nonstandard config- 
urations 


> Amount of training required 
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ing the time and money that could be 
saved by putting the information in a 
central database instead of having it 
scattered in pockets around the globe. 

Data for the repository was gathered 
from various departments, such as engi- 
neering, customer service and market- 
ing, and pooled into a common Notes 
Domino database with a browser- 
based front end. 

In cost-justifying the project, “we 
figured we could save around $2 mil- 
lion annually in mailing costs, paper 
costs and in the time that people were 
spending looking for this information,” 
Ehrman says. 


| The X Factors 


It’s just as important for IT man- 
agers to know where to look for these 
costs, says Bill Carico, president of 
ACTS Corp., a Kingsland, Texas-based 
provider of online exams and testing 
services. 

Among the TCO issues for Carico 
are the usual suspects, such as hard- 
ware, software and facilities costs. But 
he also factors in some of the less obvi- 
ous but inevitable expenses, such as 
the cost of downtime, including, for 
example, lost productivity and the cost 
of repairing a buggy system. 

“You also need to look at your ability 
to respond to opportunities 
you locked in, or are you nimble? And 
what will the costs of an unplanned 
migration be?” he adds. 

Carico ran this type of analysis be- 
fore his company decided to host its 
on Linux servers that 
were partitioned off an IBM main- 
frame. The approach allows ACTS to 
put all its computing “in an 80-square- 
foot area with less staff and probably 
about a 10-to-1 cost reduction over 
hosting on individual servers,” he says. 

It’s also important for IT managers 
to have the right mix of tools to help 
identify and measure post-deployment 
costs, says Anthony DeVoto, a Windows 
NT systems administrator at Volvo Fi- 
nance North America in Montvale, NJ. 

Having tools that reduce costs — 
such as systems management software 
to track operations at remote facilities 
— helps to centralize management 
functions and aid in lowering support 
costs, says DeVoto. 

Volvo uses a suite of remote hard- 
ware and software inventory tools 
from Woodland Park, Colo.-based Con- 
figureSoft Inc. to lower the costs of 
managing its desktops. The tools re- 
port on a vast array of details that help 
Volvo keep its configurations consis- 
tent across the enterprise and there- 
fore easier to manage, DeVoto says. D 


testing services 
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BY LEE COPELAND GLADWIN 
ISH don’t tell 
tales. But a 


EAD I 
grow- 
ing number of 
company employ- 
ees are sharing 
anecdotes about greater enthu- 
siasm, job satisfaction and pro- 
ductivity, after having adopted 
a management technique that 
stems from tossing about dead 
fish. 

The philoso- 
phy corporate 
learning film called Fish! in 
June 1998 that documents the 
workstyle of fishmongers at 
the Pike Place Fish Market in 
Seattle. The fish 
trout and salmon throughout 
the market in an upbeat and 
playful style. The idea behind 
the technique is to transfer 
that type of enthusiasm to the 
business world by encouraging 
employees to adopt a playful 


management 
began with a 


attitude about 
workers to go to extra lengths 
to meet a customer's needs. 
That film also spawned a 
book Fish! A Remarkable 


sellers toss | 


work, and for 


Way to Boost Morale and Im- | 


prove Results (Hyperion, March 


2000), by Stephen C. Lundin, | 


Paul and John Chris- 
that provides con- 


Harry 
tensen 
crete steps to apply those con- 
cepts to managing a business 
or department. 


The Guts 


The book tells the fictional 
story of a burnt-out depart- 
ment head charged with man- 
aging 
group of employees. The char- 
acter stumbles into Pike Place 
Fish Market during her lunch 
break to 
high-energy and joyous fish- 


a rough-and-tumble 


discover a 


crew of 


BUSINESS 


FINANCIAL & BUSINESS CONCEPTS IN BRIEF 


Fish 


DEFINITION 


Fish is a management philosophy that originated at 
the Pike Place Fish Market in Seattle, where fish- 
mongers playfully toss around trout and salmon. The 
idea is to transfer that enthusiasm to the business 
world by encouraging employees to adopt a playful 
attitude about work and to go to extra lengths to 
make a customer’s or a colleague’s day special. 


HOLY MACKEREL! With two-handed precision, Jaison Scott air-expresses a salmon at Pike Place Fish Market 
in Seattle, whose upbeat and playful style toward work is featured in the management learning film Fish! 


making a customer’s day and 
being present. For example, 
choosing your attitude incor- 
porates several ideals, such as 
demonstrating personal 
countability, being proactive 


ac- 


| about work tasks, not acting 


mongers at work. She takes the 


ideals she picks up back to her 
motley corporate crew, in an 
effort to motivate the lacklus- 
ter bunch into happier and 
more productive workers. 

The Fish philosophy is based 
on four concepts: choosing 
one’s attitude, playing at work, 


like a victim and bringing your 
best self to work. 

“Fish is really about being 
present and 
work,” says Christensen, a 
filmmaker and CEO of Chart- 
House International Learn- 
ing Corp., a management 
consultantcy in Burnsville, 
Minn., which produced the 


conscious at 


| 
| 


| 
| 


Fish videos and literature. 
Christensen believes that 
the Fish philosophy applies 
particularly well to the tech- 
nology realm. 
“Let’s face the fact that most 


IT professionals work in their | 


own space, and it’s easy to 
not be engaged in what you’re 
doing,” he “With Fish, 
you ask yourself, ‘Are you just 
going through the steps or be- 
ing in the moment?’ ” 
According to Christensen, 
it’s easy for IT professionals — 
especially programmers — to 
become isolated by the type of 


says. 





work that they do. Fish re- 
minds workers to make a con- 
scious decision to enjoy what 
they’re doing, with the hope 


| that this kind of focus will un- 


lock creativity and problem 
solving and generally improve 
the work environment. 


| The Bait 


Several large companies, in- 
cluding Ford Motor Co., AT&T 
Corp. and State Farm Insur- 
ance Cos., have taken the bait 
and made the Fish philosophy 
part of their training programs. 

John Little, organization de- 


| with me for a minute,” 
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velopment manager at Ford, 
introduced the Fish philoso- 
phy to the materials, planning 
and logistics division at the 
automaker in April last year. 
Just like the main character in 
the book, Little says his divi- 
sion needed a morale boost. 

“This is a division with a his- 
tory of apathy and not wanting 
to get involved,” Little 
knowledges. “A lot of people 
thought, ‘It’s not OK to have 
fun here.’ ” 

Little focused on the core 
Fish concept of attitude first, 
prodding colleagues to start 
asking new questions about 
how to approach their work 


ac- 


with joy and enthusiasm. 

“IT asked them to hallucinate 
Little 
recalls. “What if it were possi- 
ble to have fun here; what 
would that be like?” 

A year later, Little says, high- 
fives are rampant throughout 
the division at Ford, along with 
other reminders from the Fish 
seminars that he has conduct- 
ed, such as jeweled fish pins 
and posters. 

Melville, N-Y.-based Arrow 
Electronics Inc., the world’s 
largest distributor of electronic 
components with $13 billion in 
sales last year, introduces the 
Fish philosophy to all of its new 
employees at its U.K. offices. 

“The nature of MIS is that 
they do their bit to write appli- 
cations, with little interaction 
with colleagues,” says William 
Hope, training manager at 
Bedford, England-based Arrow 
Electronics. 

Hope says the Fish tech- 
niques have helped Arrow’s IT 
staff develop better rapport 
and have energized the firm’s 
customer service staff. He 
measures the success of the 
program by the heightened en- 
ergy he feels at the office. 

“It was hard to get their buy- 
in and recognition that there’s 
an element of choice in one’s 
attitude,” Hope says. “We got 
people to lighten up.” D 


@ Are there business terms you would like to learn about in QuickStudy? Please send your ideas to quickstudy@computerworld.com. 
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INTELLIGENT CONTENT DISTRIBUTION: When a holiday season onslaught took the FAO Schwarz 
Web site by surprise, the AT&T Business Intelligent.Content Distribution Service (ICDS) sprang 
into action. Within 24 hours, this service moved pictures, copy and other critical content out to an 
expansive network of AT&T Business ICDS servers. Where content could be closer to the customer 









and served up at lightning speed. This freed FAO Schwarz servers to focus on order processing and 






fulfillment. The divide and conquer approach reduced network bottlenecks and service denials, Wee 






totally transparent to FAO Schwarz customers. All they experienced was a fast and fun Web site. 
With AT&T Business, you have valuable allies that are always ready when you need them. 






— PVE sie aes 


——-__ Innovative Networks. Innovative Thinking 


For a full arsenal of Web Hosting and Content Distribution services 
Call 1866 520-5787 or visit www.att.com/business/hosting 
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DRIVING THE DEAI 


ot in the Contract, 
ot Part of the Deal 


F IT’S NOT PART OF THE CONTRACT , it’s not part of the deal. 

This is one of 10 truths in technology deal making [Business Advice, 
June 4], and it’s an important one whenever you negotiate, regardless of 
the state of the economy or your relationship with a vendor. 


Che potential consequences 
of forgetting it make it all the 
more critical. Some have 
and 
way. Many times 


learned this the hard 
costly 
they have to get into a dispute 
with a vendor to discover that 
Ss written into the 
contract, right near 
the signature line. 


a Clause 


vendor's 


Overlooked clauses cause 
countless problems. Here’s 
one way to counter it: When 
you issue a request for propos 
al (RFP), include a compre- 
hensive description of your re- 
quirements, and make it clear 
that you expect all potential 
vendors to respond to every 
requirement. In order for the 
vendor to be in the running, its 
response to your RFP require- 


PC Sales Drop 


PC sales are going to be bad this 
year. How bad? Look for sales in the 
U.S. to slide 6.3%, according to a 
recent report by IDC, a Framing- 
ham, Mass.-based research firm 
and sister company to Computer- 
world. Most of the drop will be 
fueled by sagging consumer spend- 
ing, down 17.3% in the U.S., the 
report says. 


FTC Fights ID Theft 


The Federal Trade Commission 
(FTC) plans to turn to the Web next 
month to combat identity theft by 
officially unveiling its Know Fraud 
initiative. 

The Know Fraud Web site will be 
a one-stop spot for victims to report 


ments must be included as 
part of a contract. Also, an 
nounce that contracts will 
include any additional vendor 
representations and induce- 
ments that you deem impor 
tant. All of it is part of the con- 
tract, which is the only criteria 
you should use in selecting a 
vendor. And be sure you re- 
iterate these ground rules 
throughout the vendor sales 
campaign. You may be sur- 
prised — this eliminates a 

lot of superfluous sales postur 
ing, unrealistic user expecta- 
tions and other unnecessary 
representations. 

At some point in the discus- 
sions, you can offer an alterna- 
tive. For those naive vendors 
willing to delete the “if it’s not 


and follow up on stolen identities. 
Three of the country’s four top 
credit card agencies have signed 
up to print the logo and a toll-free 
reporting number on customer 
statements, according to Bob Kuyk- 
endall, program director on loan 
to the FTC from the U.S. Postal 
Inspection Service. For a sneak 
peak, go to www.consumer.gov/ 
knowfraud. 


Hospital Taps CSC 


The Childrens Hospital Los Angeles 
recently signed a seven-year, $100 
million outsourcing contract with 
Computer Sciences Corp. (CSC) 

in El Segundo, Calif. The IT consul- 
tancy will manage the hospital's 
business and clinical information 
systems, including mainframe and 
midrange computers, 1,800 desktop 
computers, help desk operations, 
voice and data communications, 


| and application maintenance and 
| development. 


| often as some think, according to a 


| an IT consulting firm in Arlington, 
| Mass. Of 159 IT managers surveyed, | 


in the contract, it’s not part of 


the deal” provision, you can 


incorporate things outside the 
contract into the deal, includ 
ing verbal assurances of the 
vendor's promised results and 
“guaranteed” success for the 
project. Few, if any, vendors 
will accept your offer, but it 
does make your point. 

In addition, your RFP should 
contain a contract. For the best 
results, make it your contract 
instead of a standard vendor 
contract. And have every 
vendor respond to every pro- 
vision in one of three ways: 
Accept the provision, reject it 
or accept it with specified 
modifications. 

Also, make their responses 
to the contract a large percent- 


Coat Giant Switches 


To Linux System 


Burlington Coat Factory Warehouse 
Corp. recently chose a new Linux- 
based point-of-sale system from 
retail and banking systems vendor 
Wincor Nixdorf in Austin, Texas. 
Wincor Nixdorf will supply its Beetle 
retail systems running on Red Hat 
Linux through a wireless LAN in 
each store. The Burlington, N.J.- 
based clothing and accessories 
retailer will also get support and 
peripheral devices in the deal. 


CRM Satisfaction 


Customer relationship management 
(CRM) initiatives aren't failing as 
| 


recent study by Cutter Consortium, | 
| 


primarily from Fortune 1,000 firms 


age of your evaluation of them. 
Judge them on their contractu 
al willingness. Why make a 
decision without paying atten- 
tion to a vendor’s willingness 
to back up everything in the 
contract? 

A second truth, one of 
almost equal significance, is 
that it is not a relationship of 
trust and it is not a partner- 
ship. If you’re un- 
sure about that, 
ask your attorney 
what defines a 
legal partnership. 

For one thing, it 
involves being li- 
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answer is, of course not. So, 
forget the fantasy of a vendor 
“partnership.” 

That doesn’t mean you can’t 
have a good, professional rela- 
tionship with a supplier. 

Just because it’s not a rela- 
tionship of trust doesn’t mean 
it’s all bad. But we have a ten- 
dency to let down our guard 
when we think about a rela- 

tionship of trust. 

Along the same 
lines, I’ve heard 
customers Say, 
“We're partnering 
with them.” Don’t 
believe it. 


able for each oth- 
er’s actions. This 
isn’t what a ven- 
dor contract is 
about. Read one 
and you'll agree: 
It’s not a relation- 
ship of trust; it’s 
one of mistrust. 
This is a rela- 
tionship where a 


JOE AUER is president of 
International Computer 
Negotiations Inc. 


(www.dobetterdeals.com), 


a Winter Park, Fla., 
consultancy that 
educates users on high- 
tech procurement. ICN 
sponsors CAUCUS: The 


When a client 
tells me that he’s 
partnering with a 
vendor, I say, 
“Could I see your 
partnership agree- 
ment?” Better 
than 99% of the 
time, it isn’t a 
partnership and it 
certainly isn’t a re- 


vendor drafts a 
document that 
protects itself and 
passes the risk on 
to you. At some point, the ven- 
dor will say to you, “Trust us.” 
Ask yourself if it has shown 
any trust. In many cases, the 


and government agencies, more 
than three quarters said they are 
satisfied with their organization's 
CRM efforts. When asked what as- 
pect of CRM is most important, 
38% of respondents chose “360- 
degree view of the customer,” 21% 
chose “personalization” and 15% 
chose “one-to-one marketing.” 


BP Expands 


Accenture Contracts 


BP PLC has expanded its $300 
million outsourcing contracts with 
New York City-based Accenture for 
financial and administrative ser- 
vices by signing another IT deal 
worth $175 million. To address BP’s 


| business integration needs following 
| its merger efforts with Amoco, 


Burmah Castrol and Arco, Accen- 


run critical business systems that 
support BP’s U.S. downstream 


ture is expected to design, build and | 
| 
| 


| back-office business processes. 


Association of High-Tech i 
Acquisition Professionals. } 
Contact him at 


lationship of mu- 
tual trust. 

These two 
truths will goa 
long way in supporting your 
deal-making efforts. Watch for 
future columns with more 
truths. D 


Under the nine-year deal, Accen- 
ture’s Houston-based Senergy Busi- 
ness Center will provide BP with 
system support starting next month. 
The systems covered by the con- 


| tract include accounts payable, gen- 


eral accounting, treasury, financial 
analysis and application manage- 
ment. London-based BP is an inter- 
national energy company with ex- 
ploration headquarters in Houston. 


South Dakota 
Farms Out HR Apps 


The state of South Dakota recently 
outsourced its human resources ap- 


| plications to St. Paul, Minn.-based 
| Agilera Inc. to move away from pa- 


per-driven processes. Englewood, 
Colo.-based Agilera will integrate 
and host human resources, payroll 
and Web self-service applications 
for employees and managers, allow- 
ing the state to reduce its software 
maintenance and IT support needs. 
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HACK OF 
THE MONTH 


The rate of credit card 
fraud over the Internet is 
three times higher than 
the rate for all credit 
card transactions. On- 
line merchants need to 
protect themselves, or 
they could be sunk by 
fraud artists. » 42 


SECURITY 
JOURNAL 


When a federal agent 
presents a court order to 
allow electronic surveil- 
lance, security manager 
Mathias Thurman must 
scramble to protect his 
company’s network 
while complying with 
the letter of the law.» 44 


FUTURE WATCH 


Computer scientists say 
the humble ant heralds a 
revolution in software 
design. Rather than rely- 
ing on complex, central- 
ized logic, systems that 
mimic ant behavior use 
many small, autonomous 
software agents. Acting 
on the simplest of rules, 
these agents together 
can solve problems that 
are enormously complex 


as a whole. » 46 


SERVER CHOICES 


In an increasingly frag- 
mented server market, 
IT departments are find- 
ing more options avail- 
able in e-commerce 
servers that can handle 
back-end processing 
and integrate well with 
legacy systems. » 48 


TECHNOLOGY 


Gala MMOL SMO UE emcees llecin cele ld 
NSA, says, “Our job now is to make sure government sys- 
tems, as they connect to the more public Internet systems, 
WEN LR Ce a eR CU LC 


KEEPER OF CLOSELY 
GUARDED SECRETS 


IN HIS 35-YEAR TENURE at the National Security Agency, Michael 
Jacobs has watched the agency shift from tightly controlled 
computing and proprietary code to distributed computing and 
commercial products. Jacobs, now the NSA’s information assur- 


ance director, has made a career out of providing 
a secure IT infrastructure to his constituents. He 
talks with Computerworld about how any organi- 


zation can benefit from his initiatives. 





Sharp PDA to Feature 
dava/Linux Browser 


Access Co., a Tokyo-based embed- 
ded software vendor, will provide a 
new version of its NetFront Internet 
browser for Mahwah, N.J.-based 
Sharp Electronics Corp.'s new 
Java/Linux based portable digital 
assistant (PDA). The new browser 
will be used in Sharp's Zaurus PDA 
running Linux/Java, which is ex- 
pected to be available in the fall. 


BEA Unveils Updated 
Application Server 


San Jose-based BEA Systems Inc. 
has unveiled its WebLogic Server 
6.1, an update to its application 
server with beefed-up integration to 
legacy systems and WebLogic Por- 
tal 4.0. WebLogic is compliant with 
Sun Microsystems Inc.'s Java 2 En- 
terprise Edition specification and 
supports wireless development. 
WebLogic Server 6.1 is siated to 
ship next month. WebLogic Portal is 
expected to ship in the fall. 


Insignia Launches 
dava for iPaq 


Insignia Solutions Inc. in Fremont, 
Calif., said that its Jeode Java run- 
time environment for Compaq Com- 
puter Corp.'s iPaq Pocket PCs is 
available at Compaq’s Web site. In- 
signia said Jeode will be the first au- 
thorized Java virtual machine avail- 
able through a Pocket PC maker. 


Firms Team Up for 
Thai Wireless Net 


Paris-based Alcatel SA has an- 
nounced that it entered into a 
$332 million agreement with Paris- 
based wireless company Orange SA 
and Bangkok, Thailand-based 
Charoen Pokphand Group to build a 
wireless network in Thailand. The 
network will be based on General 
Packet Radio Service technology, 
also referred to as 2.5G, which op- 
erates in the 1,800-MHz range. 


DEBORAH 


E-Merchant B 


TECHNOLOGY 


RADCLIFI 


HACK OI] 


THE MONTH 


Cwale 


FTER CREDIT CARD FRAUD started hitting Dave Bundtzen’s 
Internet job-placement business at a rate of 3.5% of all tran- 
sactions, a single fraudulent charge of $19.95 wound up costing 


him $64.90. 


Credit card companies measure fraud in chargebacks — 


the transactions involved in 
clearing up the bogus 
charges. On the Internet, 
those chargebacks run more 
than three times higher than 
all other credit card process 
ing mediums combined, ac- 
cording to estimates by Visa 
International. 

A fraud rate of 1% (of 
gross credit card sales) 
earns a merchant a “high 
risk” rating. High risk means 
high chargeback fees to the 
merchant. And it’s those 
charges, along with return 
fees to customers and re- 
turned merchandise, that 
nearly put Bundtzen’s com- 
pany, Phoenix Interactive, 
out of business 


“Merchants are 100% re- 


sponsible for the charge 
backs in card-not-present 
charges. Carders are putting 
the smaller e-merchants out 
of business. And no one is 
going after the carders,” says 
Dan Clements, CEO and 
founder of CardCops in Mal- 
ibu, Calif. 

Clements has been track- 
ing a growing number of In- 
ternet “carders” credit 
card fraud artists — who are 
emerging from or joining 
forces with criminal clans in 
Russia, Japan and the U.S. 
Last month, Clements 
formed CardCops to provide 
an investigative service for 
e-merchants. 

Other services are pop- 
ping up around electronic 


Users Slow to Adopt Bluetoo 


Chip prices remain too high, say analysts 


BY MATT HAMBLEN 
The 


technology 


short-distance wireless 


called Bluetooth 
was unveiled years ago, and 
products using it first emerged 
at Comdex/Fall "99. Despite 
wide interest in using the tech- 
nology to help eliminate an- 
noying cables connecting cell 
phones, handhelds and other 
personal devices to printers 
and other machines, Bluetooth 
hasn't yet caught on. 

Analysts say the delay is a 
classic problem of a good tech- 
nology that hasn't yet found its 
market, mainly because early 
Bluetooth chips and products 
are expensive. And some users 
still that Bluetooth 
could interfere with networks 


worry 


conforming to the 802.11b stan 
dard, though 
claim that such concerns are 


even vendors 
overblown. 

At the recent Bluetooth Con 
2001 in Monaco, Palm 
announced a 

Palm 
will allow 


gress 
Inc. postage 
Bluetooth 


wireless 


stamp-size 
card that 
communications between Palm 
m500 and m505 handhelds and 
other Bluetooth-enabled de- 
vices within 30 feet 

The Palm device is going to 
sell for about $150 when it 
ships by year’s end, said the 
Santa Clara, Calif.-based ven- 
dor. Some _ internally 
Bluetooth laptops and PCM- 
CIA Bluetooth cards are avail- 
able, but most of these add-ons 


wired 


retail fraud losses, as well. 
For example, CyberSource 
now offers an e-merchant 
fraud-detection scoring sys- 
tem based on behavioral and 
pattern analysis. 
With this system, 
consumer orders 
at 3 a.m. using a 
post office box for 
a shipping address 
would get a “high 
probability of 
fraud” score 

And the Cyber- 
Source system ties 
into Visa’s neural 


DEBORAH RADCLIFF is a 
Computerworld feature 
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accuracy by more than 50%, 
according to Jean Bruese- 
witz, senior vice president 
for advanced risk solutions 
at the company. 

Also, Visa last fall piloted 
a payer authentication pro- 
gram called 3D Secure that’s 
based on digital certificates. 
Chis directory service veri- 
fies a shopper's authenticity 
through issuing banks par- 
ticipating in the program. 

“If you look at the differ- 
ence between store transac- 
tions and Internet transac- 
tions, what you're really try- 
ing to do is finda 
way to authenti- 
cate the cus- 
tomer,” Bruese- 
witz says. 
“Through 3D Se- 
cure, the actual 
identification is 
verified by Visa.” 

Clearly, there 
are a lot more re- 
sources than in 


writer. Contact her at 


fraud-detection 
network that 
tracks fraud re- 
ports. This network im- 
proved Visa card transaction 


h Products 


cost $100 to $150, analysts said. 

“Who's going to pay $150 for 
a Bluetooth card when it’s not 
that inconvenient to pay much 
less and use a cord?” asked Pe- 
ter Firstbrook, 
Meta Group Inc in Stamford, 


an analyst at 


Conn. 

As a result of the still-high 
cost of chips, which run $27 to 
$50 for manufacturers, Meta 
Group has delayed its projec- 
tions for when Bluetooth will 
be widely in use to 2004. In 
1999, the firm said ubiquitous 
usage would arrive in 2002. 

Alan Reiter, an analyst at 
Wireless Internet and Mobile 
Computing in Chevy Chase, 
Md., said he agreed that Blue- 
tooth “is at least two years 
late,” adding that chips were 
supposed to cost $5 by now but 
still cost $30 on average. D 


deborah_radcliff@ 
computerworld.com. 


the early days of 
e-commerce when 
Bundtzen started 
out. He averted his crises 
the old-fashioned way: 
cross-checking incoming or- 
ders through his company’s 
own database and using im- 
proved call center screening 
techniques. In so doing, he’s 
now well below the 1% high- 
risk credit threshold again. 
“It really is ‘merchant be- 
says Tom Arnold, 
CEO of CyberSource. “Small 
to medium-size e-commerce 


ware,’ ” 


sites are going out of busi- 
ness” as a result of credit 
card fraud. 

Statistics linking e-mer- 
chant failures to credit card 
fraud don’t exist. But some 
numbers speak for them- 
selves. Meridien Research 
estimates Internet credit 
card fraud rates at 10% of all 
Internet sales in 1999. With- 
out intervention, Internet 
fraud will have cost U.S. 
merchants $30 billion by 
2005, according to Meridian. 

With losses like these, 
only the mighty withstand. D 
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- IT’S A DIFFERENT KIND or WORLD. 
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anager Locks Down 
As the Feds Move In 


A hacker attack via a stolen laptop puts Thurman’s 
organization in the middle of a federal investigation 


BY MATHIAS THURMAN 


HE HACKER INCIDEN 


I de 
scribed in my last column 


{Technology, June 4] has 


taken several new turns 


and has been keeping us 
very busy. Our company was the vic 
tim of an incident in which a salesper 


son’s stolen laptop was used to dial 
"+ 


in to our network. The intruder then 


used us as a launching 
hack 


computer networks. In one 


point to into other 


case, the intruder gained 
access to a financial in- 
and transferred 
credit card account infor- 


hacked 
computer 


stitution 
mation to a uni- 
versity 
in the Midwest 

The compromise of our 
dial-up system was due to 


system 
oo 


an employee's laptop con- 
figuration. The system was 
set to dial in to the com- 
pany’s modem bank, and 
the “remember password” 
checked 
the connection dialog box. 

Normally, we would im- 


box was within 


mediately shut down the account after 
detecting such a break-in. But the three- 
letter agency involved had other ideas. 


Rules of Engagement 


An agent 
search warrant, which provided enough 


served a subpoena and 
information to justify the subsequent 
issuance of what’s called a Title 3 wire 
tap order. From what I understand, this 
order gives a law enforcement agency 
permission to monitor communica- 
tions without a party’s knowledge. In 
the communication was by 
the actual dial-up connection used. The 
order was good for 10 days. 


this case, 


Our general counsel confirmed that 
the Title 3 order was valid and that I 
needed to cooperate fully with the 
agency. The problem, however, was 
that our only involvement was the dial- 


SECURITY 
MANAGER'S 
JOURNAL 


up access to our segregated network. I 
wanted to be sure that the hacker didn’t 
gain access to any of our other critical 
I didn’t 
manpower to do so quickly. I spoke 


infrastructure, but have the 
to the CIO, who approved the hiring of 
consultants to help me conduct a thor- 
ough security assessment. Once I had 
them board, the consultants set 
network. The 
team spent three days (at 
$150 


on 


about assessing the 


per hour) assessing 
our routers, switches, mo 
dem _ bank 
RAID and 
servers and accounts 

They did an awesome job 
and actually found 
rity holes in other parts of 
our network that I didn’t 
know existed. Specifically, 


configuration, 


other access 


secu- 


they discovered a miscon- 
terminal 
allow 


server, 
unau- 


figured 
which could 
thenticated access to some 
of our critical domain name 
servers and mail servers. 

We use terminal servers 
as a way to access our Unix 
systems in the event that 
our Internet connectivity goes down. 
The terminal server ports are 
directly connected to the serial ports 
on the back of the Unix servers. This 
particular terminal server wasn’t con- 
figured to force authentication to the 
port and allowed direct access to the 
Unix servers. 

his is a bad thing, especially if an 
administrator forgets to log out of a 
session and leaves a root-level log-in 
prompt available. We quickly fixed the 
problem and returned to the task at 
hand. 

The conclusion I was looking for was 
that the intruder hadn’t gained access 
to anything other than the dial-up infra- 
structure. Happily, the final verdict was 
that indeed there had been no other 
unauthorized access. And because we 
were used only as a launch point for the 


attacks, there was no traffic on our net- 
work for the agency to monitor. 

The agent decided that he was inter- 
ested in being notified only when the 
hacker actually logged in to our net 
work so that he could take appropriate 
action 
brought in a consultant who helped 


configure some scripts and a separate 


The law enforcement agency 


server to send out a page whenever 
the offending account logged into the 
network. 

Apparently, the agency also had in- 
stalled packet-sniffing devices to ana- 
lyze network traffic at the other com- 
promised locations, and it was going to 
use the dial-up account to help corre 
late information. The 
also wanted to trace back the telephone 
connection. When the hijacked account 


access agency 


logged in, the agent receiving the page 
would contact the local telephone com- 
pany and trace the call back to its point 
of origin. 


Game Over 

Unfortunately, the hacker didn’t log 
in to the account again, and after 10 
days, the wiretap order expired. The 
judge didn’t want to extend the order, 
so the agent and his consultant came by 
to collect their equipment. The agent 
suggested setting up a “honey pot” to 
try to lure the hacker to our site, but 
I didn’t want to go down that road. 
Honey pots just give hackers a reason 
to stay at a site. 

It’s been a week since the law en- 
forcement officials left. 1 haven’t heard 
from them, and I doubt I ever will. Now 
I must write up and present a post- 


mortem report to the executive staff, | 


and 


mending policies and procedures to 


describing the incident recom- 
ensure that something like this doesn’t 


happen again. 


In retrospect, if the sales manager or | 


IT staff had let me know about the 
stolen laptop, we could have disabled 
the dial-up account immediately and 


prevented the intrusion. Unfortunately, | 


that’s not part of our current policy. 
One good thing did come from all 


this: The incident gave me a solid justi- | 
fication for implementing SecurID dig- | 


ital token access to dial-up accounts 
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Honey pot: This is a decoy server 
that's configured to distract hackers 
into attacking the wrong system. 
These systems present tempting tar- 
gets to distract the hacker from pro- 
duction systems and give the com 
pany’s security staff more time to 
respond. If implemented correctly, 
honey pots also can be used as 
effective tools for data collection 
and criminal prosecution 


Packet sniffing: This is a term 

used to describe a system or methodol- 
ogy to eavesdrop on network traffic as 
it traverses a network. Commercial 
hardware and software tools for packet 
sniffing are also called network proto- 
col analyzers. The most commonly 
known one is Sniffer from Network 
Associates Inc. in Santa Clara, Calif. 


LINKS: 


www.recourse.com: |f you're 
looking for a commercial honey pot, 

| suggest checking into Redwood City, 
Calif.-based Recourse Technologies 
Inc. Its ManTrap product takes a unique 
approach and is worth a look 


www.ftcpdump.org: Visit this Web 
site to download the TCPdump utility, a 
popular Linux packet-sniffing utility 


www.squirrel.com/squirrel/ 
sun-stuff.html: Snoop is a popular 
packet-sniffing utility for Solaris sys- 
tems. A downloadable copy is available 
at this Web site. 


www.enteract.com/-Ispitz/snoop. 
html: This white paper by Lance 
Spitzner is a good resource for reading 
about sniffers and the Snoop utility. 


and establishing additional virtual pri- 
vate network access controls 

it’s funny how an incident like this 
will open the eyes of the executive staff. 
Many companies go for years without 
an incident happening (that they know 
about). But it takes only one serious 
incident to wipe out years of work. D 


MOREONLINE For more on the Security 


Manager's Journal, including past journals, visit 
www.computerworld.com/securitymanager. 


‘CANIN 





8 This week's journal is written by areal security manager, “Mathias Thurman,” whose name and employer have been disguised for obvious reasons. Contact him at mthurman@hushmail.com or go to the Security Manager's Journal forum. 
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THE VISITORS’ UNIVERSE NEEDED CUTTING-EDGE SOFTWARE. THIS UNIVERSE HAD IT. 


DB2 ror WINDOWS 2000 


| TWICE THE POWER OF ORACLE > A FRACTION OF THE PRICE | 





YOU NEED A DIFFERENT KIND or SOFTWARE. 


IT’S A DIFFERENT KIND or WORLD. 
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“Go to the ant consider her 


ways, and 


scien 

tists are doing just 

that, and they say 

the humble insect 

# heralds a revolu 
tion in software design 

Rather than relying on com 

*d logic, systems 


plex, centraliz 


1at mimic ant behavior use 
\ autonomous soft- 
ware agents. Each acting on 
the simplest of rules, these 
agents together can solve prob- 
lems that are enormously com 
plex when viewed as a whole 
Higher-level, or “swarm,” in- 
telligence emerges from those 
rudimentary rules in ways that 
would be difficult to program 

into conventional software. 
Such autonomous systems 
have no single point of failure 
Like ants that repair their nest 
if it’s disturbed and columns of 
ants that route around obstruc- 
tions, these systems adapt to 
unanticipated problems in a 
way that ordinary centralized 

systems can't 

Today, such systems are typ- 
ically used for optimization 
applications such as factory 
scheduling and vehicle rout- 
ing. For example, General Mo- 
tors Corp.’s Saturn subsidiary 
uses distributed systems to 
control the flow of part assem- 
blies. Instead of having each 
factory machine's actions pre- 
and unvarying 


machines can sense 
the type and state of a part and 
t their actions on the fly. 


applications draw on 


Ant Colony IT 


TECHNOLOGY 


Computer scientists studying 
ants are using them as models 
for new distributed systems. 


By Gary H. Anthes 


different ant behaviors. For ex 


ample, researchers are work 


ing on a way to analyze finan- 
cial transactions based on the 
way ants sort and cluster their 
hy j 


ood and their dead 


The technology is a decade 
old, but it’s just beginning to 
Currie, 
president of Flavors Technol 
a Londonderry, N.H. 
that 


systems 


blossom, says Doug 
ogy In 

sells 
ot 


great way to leverage technol- 


based company 


agent-based 


b the 


ecause of surprise 

it does things you 
don’t expect, but in a way that’s 
natu! 


He ¢ 


will increasingly be used to de- 


” Currie says. 
dds that antlike systems 


sign production lines, not just 
them. He predicts 


they could also have a use in 


to control 


medicine, where antlike agents 
could mimic the interactions 
of simple chemicals in the 


body and in drugs. 


TUCKER BALCH, a robotics 
researcher at Carnegie Mellon: 
Autonomous software agents will 
empower us. 


Individually, ants have prim 


itive brains, yet collectively 
they run surprisingly sophis- 

and 
With 
tion, they divide responsibili 


find 


ticated efficient opera 


tions no central direc- 


ties among themselves, 
food, build and maintain their 
nests, tend to their young and 
respond to attacks 
Using a few simple rules of 
logic, ants can find the shortesf 
path to a food source. They s4y. 
down chemical scents, called 
pheromones, and over time the 
most successful paths — origi 
nally found by trial and error 
are reinforced by the repeat 
ed deposit of pheromones 
Similarly, multiagent systems 
can solve routing problems by 
reinforcing good routes with 
“digital pheromones” and dis 
couraging the choice of poor 
routes by allowing the phero 
mones to “evaporate.” London 
based British Telecommunica 
tions PLC 
method for routing data pack 
ets around a network that way. 
Tucker Balch, a robotics re 


searcher at Carnegie Mellon 


has developed a 


University in Pittsburgh, says 
the thousands of ants in his lab 
oratory amount to a “library” 
of logic that can be applied to 
solving human problems. 

“A multiagent system could 
be the stock market, or 
thing where there are 
individuals interact- 
ing with one another,” he says. 

Today, most agents have pro 


any 
thou 


sands of 


gram logic built in from the be 
ginning. But Balch says agents 
will become much more pow 
erful as computer scientists 
enable them to learn from their 
environments. “These agents 
will empower us,” he says 
Swarm intelligence pioneer 
Eric Bonabeau, chief scientist 
at Paris-based EuroBios, says 
much research and develop 
ment 


remains to be done. 


“There is no clear understand- 


ne 


ing gt why it works so well in 
and 
work 


situation,” Bonabeau 


a fumber of 
proof it is 
in every 


cases, no 


going to 


says. “But there will be more 
and more applications, as there 
alternative when 


Is no you 


want to control armies of 
small, dumb entities.” 

There are also workforce 
barriers to overcome, says Van 
Parunak, chief scientist at the 
ERIM Center 


Commerce in 


Electronic 
Ann Arbor, 
Mich. “Saturn is a good exam 


for 


ple, because it is able to diag- 
nose itself and configure itself. 
rhe action it takes at any mo- 
ment can’t be predicted, and 
people find that disturbing,” 
Paranuak says. 

And sometimes it isn’t just 
factory workers who can’t pre- 
dict the behavior. “Systems of 
interacting parts have the po- 
tential to self-organize, but 
also the potential to chase their 
own tails, to go into random- 
like operation and otherwise 
fall apart,” says Parunak.» 
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TECHNOLOGY 


THE] 
WEBOE 


Anew class of e-commerce system is designed 
to bridge the divide between state-of-the-art 
Web servers and back ends rife with idio- 
syncratic legacy apps and unique business 
processes. Not surprisingly, no single product 
can do it all. By Steve Ulfelder 


ICKING THE SERVER software that drives 
your e-commerce business can be a tough 
decision. Take a look at the leading e-com- 
merce servers, and it’s not easy to find a 
The technology’s not much 
of a differentiator,” says Larry Perlstein, an 
analyst at Stamford, Conn.-based Gartner 
Inc. “These guys have reasonably similar 
architectures. And we typically see imple- 


clear winner. “ 


mentation times of 60 to 120 days, regardless of ven- 
dor claims.’ 

A report by Patricia Seybold Group Inc. indicates 
how specialized the e-commerce server market has 


become. The Boston-based consultancy separates the 


field into three groups, as follows: 

w= Buy-side servers are typically used to imple- 
ment purchasing processes 

= Sell-side servers are application packages that 
handle key online business processes, from sales and 
marketing to customer service and fulfillment. The 


Seybold Group report says that these “do for e-com- 
merce what products like SAP R/3 and Oracle applica 
tions do for [enterprise resource planning] functions.” 
a Marketplaces are exchanges that serve as inter- 
mediaries. Mountain View, Calif.-based Ariba Inc.’s 
Marketplace is one example. 

For this field report, Computerworld spoke with 
users of sell-side e-commerce servers that do both 
business-to-business and business-to-consumer 
trade, although they’re more often associated with the 
latter. Of course, not all offerings handle all the busi- 
ness processes mentioned above with equal aplomb. 
Vendors’ histories and traditional strengths affect 
their Web commerce servers’ capabilities. 

For example, analysts say that the Dynamo suite 
from Cambridge, Mass.-based Art Technology Group 
Inc. capitalizes on the company’s strength in person- 
alization and that IBM’s WebSphere Commerce Suite 
benefits from Big Blue’s integration savvy. 

However, middleware wasn't a significant factor 
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5 
when J. Crew Inc. went shopping for an e-commerce 
server. “We looked at MQSeries,” says CIO Paul Fusco, 
“but it was overkill. All we needed was a simple pass- 
through” from the server to the New York-based retail- 
er’s back end, which consists of an Oracle8i database 
running on a Sun Microsystems Inc. architecture. 

Fusco says speed and personalization were key fac- 

tors in J. Crew’s decision to purchase Dynamo. “Speed 
is probably most important to us,” he says. “When you 
look at the layer between the app and the database, it’s 
important that it perform well with Oracle8i.” 


Fast Track, Faster Service 


For some IT managers, even though they may not 
use all the features of their e-commerce servers, it’s 
nice to know that the features are there for future use. 
Mazda North American Operations in Irvine, Calif., 
runs a bustling Competition Parts program for auto 
racers who drive Mazda Miatas, RX-7s and other cars. 
But the program hasn’t printed a catalog since 1997, 
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and the small department was swamped by up to 100 
calls per day. It was long overdue for a Web site. 

Ross Katz, Web development consultant at Mazda 
North American, says the organization didn’t want to 
simply throw the catalog on a Web page. Rather, it was 
deemed critical that the Web site tie in with inventory 
systems so customers could check on parts’ availabili- 
ty in real time. And since they were going that far, the 
Competition Parts staff decided to do the entire trans- 
action online. Katz says ordering, cataloging, payment 
processing, reporting capabilities and campaign man- 
agement were all important. 

Mazda evaluated the leading e-commerce servers 
but leaned toward WebSphere Commerce Suite, in 
part because the automaker was already an IBM shop. 
Mazda ran its Java-based inventory system, which 
IBM helped create in 1999, on an S/390 Parallel Enter- 
prise Server. 

WebSphere Commerce Suite Version 5.1, running 
ona Windows NT server, now underpins Mazda’s 


~ 


ROSS KATZ, Web development consultant at Mazda 
De Ue RE Cn COM Emel LR ULe| 
Per em eR ste test Ce 


catalog. The catalog’s contents reside in IBM’s 
DB2 Universal Database. Stocking data comes 
from the company’s inventory system, with IBM’s 
MQSeries middleware facilitating communication 
between CICS applications on the $/390 
and the catalog. 

Mazda shied away from previous Web- 
Sphere Commerce Suite releases that in- é 
cluded multiple languages. “We’re an all- ; 
Java shop,” Katz says. When IBM released ur We 
the Java-only Version 5.1, “it was like the 
missing puzzle piece,” he says. hrveates 

Katz says that to avoid rewriting applications, 
Mazda customized its parts-availability inquiry so 
that it could be prompted by Enterprise JavaBeans 
to get the needed data. WebSphere Commerce 
Suite’s Java programming model makes it easy to 
customize, he explains. That, along with the back- 
end integration with MQSeries and CICS, tipped 
the scales for choosing IBM’s product, he says. 


www.computerworld.com 


hough Mazda doesn’t use 
merce Suite’s functionality (such as 
features, which let businesses use 
create sites for multiple locales) 
insurance: “Vendors come in wi 


agement software. I say 


New Meets Old 


For large organizations with la 
on legacy systems, integration is a key con 
a year ago, Lowe’s Cos., was seeking t 
e-commerce infrastructure as part of 
tool Lowes.com, the Wilkesboro, N.( 
improvement retailer’s Web site. 

Matt E. Deeter, Lowe’s vice president 
operations, says the company didn’t t 
e-commerce server suited its needs per 
wanted to create on its Web site “visual « 
ters” — Internet equivalents of what store en 
see on their dumb terminals as they ring up sales 

Deeter’s team favored this approach because it 
leveraged its existing databases and back-end func 
tions. “When you looked at a Blue Martini or a Br« 
Vision,” Deeter says, “you had to almost sell your sou 
... You had to put all kinds of different data in these 
single systems. How do you tie that back 
systems? Trying to integrate that would 
something we'd have had to spend al 

According to Gartner’s Perlstein, 
is representative of others’. Until 
says, “people were building online 
independent apps [not integra 


with] the rest of the legacy back end 


alone entities 


data synchronization problems. “They 
data out of legacy back ends for th 
tegration was real tough,” he says 
stein, the tide has turned. “Compar 
don’t want to have two i 
“They want a more fully ir 

Lowe’s wound up customizing OneSoft 


e-commerce sulte from, Lean 


tecture 

with Lowe's thin-c 

runs on IBM AIX serv 
that in the integration with its own existi 


Lowe's used “maybe 30%” of OneSoft’s fit 
“We'd be sitting with their ar 


saying, “This isn’t how we usually do [an imp 


ects and ti 


tion].’ We said, ‘Well, we’re the customer, 

how we want to do it,’ ” he says 

Although users’ needs vary considerably, IT 
have a core set of requirements for e-c 

merce servers. ‘People are moving back 

first principles,” says John Matranga, chief 

technol ron Cor 


Inc. in Philadelphia. The 


gy officer at On 
» demanding 
products that are scalable, easily maintained 
and that integrate well with existing data 
bases. “Everybody’s got a different angle,” Matranga 
says. “Maybe someone's personalization is better, or 
their CRM or integration. Everybody's got a slightly 
different way of doing it, so you pick what’s important 
to you.” D 


Ulfelder is a freelance writer. Contact him at 
sulfelder@charter.net. 





ASHINGTON 1: John I 
Kennedy had recently been 
assassinated. The war in 
Vietnam was heating up. And 
Michael Jacobs was looking for a 
job. When he read a college 
recruitment catalog from the 
National Security oncy (NSA), he jumped at the 
opportunity, eventually landing in the newly formed 
Communications Security Directorate (Comsec). 

Keys, codes, ciphers and cryptanalysis were the 
order of the day, with a little linguistics and telecom 
munications on the side. But in his 37-year tenure at 
the NSA, Jacobs has watched Comsec’s role (and its 

me) change to reflect a shift from tightly controlled 
computing and proprietary code to distributed 
computing and commercial products. 

Now, Jacobs says, his IT organization has one foot 
in each world — the commercial and the proprietary. 
And to make sure commercial tools pass muster in 
terms of security, the NSA runs them through new 
software-testing programs. These programs, the 
Common Criteria Evaluation and Validation Scheme 
and the Cryptographic Module Validation Program, 
are part of the agency’s National Information 
Assurance Partnership, a joint effort with the National 
Institute of Standards and Technology (www.niap. 
nist.gov), IT product vendors and users. 

Products must pass rigorous testing before earning a 

ommon Criteria security rating. The ratings were 
developed to help the Fort Meade, Md.-based NSA, 
but they’re also available to private-sector users. And 
because testing standards are international, buyers of 
evaluated products can deploy them more easily 


across the globe 


What are the differences between computing today and 
computing in the 1960s? Our history is in code- 
making. So you could say we began around 





World War II. The nucleus of this organization 
was formed by intelligence specialists and sci 
entists who began building government ma- 
chine and nonmachine systems. We no longer 
had to rely on commercial technology to pro- 
duce any crypto [systems] the government used 
We [also] designed our own messa x system: 
the Automatic Digital Network. So, if you were 
a government entity and you needed to secure 
your communications, you came to us, and we 
had a standard brochure of available crypto de 
vices for voice, teletype, radio, phone. We had a 
monopoly. 

We began to see some change in the 80s. 
Computers were playing a bigger role in the 
telecommunications and information environ- 
ments. And now we had a lot of computer-based 
information management systems — sometimes 
directly connected to telecommunications sys- 
tems. We were no longer a monopoly. Our com- 
petition went from none to dozens of commer- 
cial companies. We found ourselves trying to 
keep pace in an industry running at warp speed. 


What were the resulting changes at the NSA? When we 


were a monopoly, we had the luxury of support- 
ing uniquely developed systems, combined with 
the luxury of time to do it right. Some of your 
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Michael Jacobs 


Keepin 


The National Security Agency is using t 
protect systems and data, says Informat 
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development cycles could be as much as five 
years. Government systems lasted 20 to 30 
years. So you had time to integrate and test the 
product to death. The security side of the devel- 
opment cycle was risk-averse. Now, we’ve got a 
risk-complex environment [because] we don’t 
have the luxury of time. For example, firewalls 
upgrade every 18 months. So we have to be 
more agile in our approach to dealing with se- 
curity problems. This has shifted the burden of 
security from the developer — us — to the cus- 
tomer. Instead of a risk guarantee, we deliver to 
the user a set of products configured for better 
security and we still have to say, “Oh, by the 
way, here are the residual risks you have to deal 
with now.” Now, parts of the network continue 
to be secured by NSA. Where we rely on com- 
mercial technology, we have evaluated against 
the Common Criteria testing program, under 
our National Information Assurance Partner- 
ship in conjunction with the National Institute 
of Standards [and Technology]. 


The Common Criteria program distributes the vulnera- 


bility testing of commercial software to certified 
testing centers, with the software vendors picking 
up the tab. What was your reasoning behind this? 
Our job now is to make sure government sys- 
tems, as they connect to the more public Inter- 
net systems, have as high a degree of security as 
we can make today. The Common Criteria is 
one of the most important vehicles we use to 
promote evaluation of vendor products against 
internationally recognized standards. We 
helped set those standards by collapsing into it 
our other criteria, mainly our “Orange Book” 
[http://jcs.mil/htdocs/teinfo/Mdirectives/soft 
ds5200.281.html). And we already had partnered 
with independent, certified testing labs through 
our Trust Technology Assessment Program for 
testing technology products against the Orange 
Book. All but one of those testing labs has recer- 
tified under the Common Criteria program. 


TECHNOLOGY 


The Common Criteria 
is one of the most 
important vehicles we 


use to promote evaluation 


of vendor products 
against internationally 
recognized standards. 


MICHAEL JACOBS, 
INFORMATION ASSURANCE DIRECTOR, NSA 


How does the Common Criteria program help business- 


es? We've got around 45 products [www.niap. 
nist.gov/niap/services/validated-products.html ] 
tested so far. These are commercial firewalls, 
operating systems, routers, intrusion-detection 
systems, etc. The testing centers run these 
products against a barrage of tests and assign 
them assurance levels [from zero to seven]. The 
higher the number, the more secure the prod- 
uct. Anyone who buys commercial products 
benefits from this. 


How is it possible to test commercial software for secu- 


rity when the products can run in an infinite num- 
ber of network configurations? This is an area 
we're working on: How do you put it all togeth- 
er as a system and determine the weak areas? 
How do you quantify those weaknesses? How 
do you overlay the new system on hardware and 
software? How do you determine procedures? 


a 


We have work under way to develop a standard 
of operational procedures to begin to address 
the system-level problems. We need to codify 
best practices and elemental understanding 
somehow and put that into a Common Criter 
like format. Then we need to get that into the 
hands of the industry to share some of the bur 
den by testing for vulnerabilities at the system 
level, not just the product level. I would hope 
we have something in the industry for evalua- 


tion next year. 


What other challenges do you face? One of our 


frustrations is version control. We still ca 

the [government user] customer to accept ver- 
sion control because they want the newest 
graphics and the fastest speed. Say we've opti- 
mized a new product and given the customer 
their guidelines that, if followed, will assure se 
curity to the best of our ability — then some ad- 
ministrator at the customer site changes some- 
thing, and we have no way of knowing if they’ve 
just opened up a new vulnerability. 


Your plight sounds similar to that of commercial busi- 


nesses. Do you have any advice for them? First, 
recognize there is no longer any silver bullet 
That’s why we need evaluation of products. But 
you also need a deep assessment of your net- 
work configuration, procedural recommenda- 
tions, policies and then technology if you want 
the best security you can get. All this must be 
done at a system or network level, rather 
component level. Then as you look at 

ponents you want to add to your n 

uate them against functionality, uti 

ue. Your network administrat 

curity engineers need to know it takes 
disciplinary approach to bri 

user level. But since no one person knows 

we take a team approach to do this 

ing our crypto specialists with our fir 


cialists and network engineers, for e> 


iq Secrets 


esting programs that will help it — and commercial IT’ — 
on Assurance Director Michael Jacobs. By Deborah Radcliff 
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Authoria’s Software 
Is All About Benefits 


Start-up’s Web knowledge base delivers 
individualized human resources data 


BY AMY HELEN JOHNSON 
N FEBRUARY 1999, 120,000 
employees of Norwest 
Corp. and Wells Fargo & 
Co. were worried about 
how a forthcoming merg- 

er would affect their benefits. 

Faced with the prospect of han- 

dling questions from the em- 

ployees, the administrative arm 
of San Francisco-based Wells 

Fargo decided to implement a 

new knowledge-management 

system for its human resources 
call center employees. 
Authoria HR, from Waltham, 

Mass.-based Authoria Inc., fit 

the bill, 


manager of human resources 


says Carol Johnson, 
projects at Wells Fargo’s ad- 
ministrative headquarters in 
Phoenix. 

The rapid three-month de- 
ployment was a success, she 
says, because it enabled ser- 
vice center representatives to 
quickly master the intricacies 
of the companies’ former bene- 
fits plans, as well as the new 
combined benefits package. 
Even temporary workers were 
able to provide good service. 
“All they had to know was how 
to use Authoria,” Johnson says. 


Getting Personal 
Tod Loofbourrow, 
Authoria’s president and CEO, 


says Authoria HR’s key advan- 


Hayes 


tage is that it offers personal- 
answers to employee 
The application in- 
tegrates with PeopleSoft Inc.’s 
human resources management 
database or any Open Data- 


ized 
questions 


base Connectivity-compliant 
human resources management 
database and extracts personal 
profiles that enable the soft- 
ware to individualize its an- 
swers. The product works both 
for call centers and as a Web- 
based self-service application. 

Authoria offers a version 


called Authoria Outsourcer for 
application service providers 
Authoria An- 
swerWise for benefits provid- 


and one called 


ers, such as health plans 
Monica Barron, a senior ana- 
lyst at AMR Research Inc. in 


Boston, says Authoria is one of 
first 
ment vendors to target the hu 


the knowledge-manage- 


man self-service 
market. “They’re really filling 
a void,” And with 
$93.5 million in funding, Au- 
thoria the 
needs to grow. 
Authoria HR combines the 
lifted 
man- 


resources 


she says. 


has resources it 


personal information 


from human resources 


AUTHORIA HR OFFERS personalized answers to employee ques- 
tions, says President and CEO Tod Hays Loofbourrow 


Authoria Inc. 


300 Fifth Ave. 
Waltham, Mass. 02451 
(781) 530-2000 


Web: www.authoria.com 

The technology: A Web-based 
self-service application that inte- 
grates with back-end human re- 
sources systems to provide per- 
sonalized benefits information 


Company officers: 

¢ Tod Hayes Loofbourrow, presi- 
dent, CEO and co-founder 

© Georganne DeSomery, executive 
vice president 

¢ Peter Schilling, chief technology 
officer 


Milestones: 

© 1997: Company founded 

¢ September 2000: Version 3.0 of 
Authoria HR released 

February 2001: AnswerWise 
launched 





Employees: 225 


Burn money: $93.5 

million from Capital Z Fi 

nancial Services Fund Il 

LP, Van Wagoner Capital 
Management, UnumProvi- 

dent Corp. and others 
Products/pricing: Authoria HR, 
Authoria Outsourcer and Authoria 
AnswerWise start at $100,000 
each 

Customers: McDonald's Corp.. 


T. Rowe Price Investment Services 
Inc., Wells Fargo and others 


Red flags for IT: 

* Integration with human re- 
sources administrative systems is 
time-consuming. 

¢ Current partners may add similar 
functions to their human resources 
management software 


oMPUTER 


agement systems with a regu- 
larly updated knowledge base 
of common information 
such as federal wage regula 
tions or rules on tax forms and 
maternity leave policies 
which is stored in a local SQL | 
Server or Oracle database. 

Many of 


sources questions that employ- 


the human re- 
ees ask are standard, and turn 
ing over the job of maintaining 
that database to a vendor like 
Authoria means less work for 
the human resources and IT 
departments, which are tradi- 
tionally responsible for updat- 
ing a human resources intranet 
site, says Loofbourrow. 


Upfront Effort 


Integrating Authoria with 
Wells Fargo’s PeopleSoft hu- 
man 
volved a substantial amount of 
work, says Johnson. Despite 
the tables set up in Authoria to 
make the job easier, IT staffers 
still had to determine which 
fields to load into the tables 
and that the 
data was available and reliable, 


resources system in- 


ensure needed 
Johnson says. 

The bank is now building a 
self-service version of Authoria 
HR 
Johnson, who expects to take 
the system live in October. Cus- 
tomizing the knowledge base 


for its employees, says | 


has proved challenging, 
4%, she says, because of 
* the many bank ex- 
perts involved. 
Authoria 
help with 
versioning features, 
Right 
software 


could 
some 


Johnson 
the | 
pects material review to occur | 
Wells Fargo, the | 
process involves printing out 
the content and working on re- 


says. 
now, ex- 


online; at 


visions on paper or translating 
the HTML text into a Mi 
crosoft Word file so Word can 
implement a version history. 

Authoria’s future plans, says 
Loofbourrow, are to interna- 
tionalize the product. The firm 
is building a European opera- 
tion and bringing in global ex- 
pertise on human resources 
policies and benefits in those 
countries. D 


Johnson is a Computerworld 
contributing writer in Seattle. 
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STATE OF 
THE MARKET 


An Untapped 
Niche 


Although Authoria markets itself to com 
panies with more than 1,000 employees, 
the market for an application that can 
present personalized employee benefit 
information is very broad, because hu 
man resources policies are inherently 
complex, says Monica Barron, an ana- 
lyst at AMR Research 

Authoria has indirect competition 
from custom in-house systems and from 
vendors of general knowledge-base 


| software that contains human resources 


information, says Brian Jones, an ana- 
lyst at The Yankee Group in Boston. Di- 
rect competition is sparser, says Barron 

Authoria may also face future compe 
tition from current partners like People- 
Soft Inc. that now sell back-end human 
resources packages but may decide to 
bundle in knowledge-management 
features 


ProAct Technologies 
Corp. 
White Plains, N.Y. 


www.proacttechnologies.com 


ProAct, says Barron, has a human 
resources-specific knowledge base, as 
does Authoria. The main difference, she 
says, is that ProAct offers an option to 
use its modules, whereas Authoria feeds 
its knowledge base into an existing hu 
man resources framework, like one from 
SAP AG. ProAct’s Human Capital Man- 
agement software suite couples human 
resources, benefits and payroll func- 
tions with a knowledge base that per- 
sonalizes information based on an em 
ployee’s demographics, benefits and se- 
curity profile. ProAct says its software 


| works in either a self-service or call cen- 


ter environment. 


FirstDoor.com Inc. 


Kennesaw, Ga. 
www.firstdoor.com 


While Authoria focuses on providing in- 
formation to the call center or the em- 
ployee, FirstDoor gives managers an 
electronic learning environment that 


supplies human resources staffers with 


the information they need to manage 
their employees, says Barron. FirstDoor 
says its knowledge base can be cus- 
tomized with data on an individual com- 
pany’s policies. 

- Amy Helen Johnson 
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The best way to find out how much 


TECHNOLOGY 


CCIS 


you know, or don’t know, can be 
to ask the IT professionals you 
work with. But be warned: It’s not 
always a comforting experience. 
By David S. Bernstein 


chief of the 

management 

information 

division at 
Defense Manpower Data Cen- 
ter in Seaside, Calif., has eight 
Web developers among the 
300 IT workers at the com- 
pany. You would expect that 
eight developers working at 
the same company would 


probably be able to answer 
each other’s questions, teach 
each other their best tricks 
and shortcuts, and critique 
each other’s work. 

But at Defense Manpower, 


that never happens. That's be- 


cause those eight developers 
are spread out among six 
departments. They probably 
don’t even know that they 
have peers in the company to 


whom they could go with 
questions, Dove says. 

That's why he's initiating 
monthly sessions at which 
those eight developers will be 
able to get together and dis 
cuss their work. “Sometimes, 
in a two-minute conversation, 
they can get an answer to 
something they've been work 
ing on for weeks,” Dove says. 

Learning from one’s peers is 
a vital but often unappreciated 
part of the professional devel- 
opment of many IT workers 
You tend to notice it when it’s 
missing — indeed, a common 
complaint about working for a 
small IT department is the 
lack of peers to learn from. 

Although they may not have 
the time or interest in tutoring 
you step-by-step, often, your 
co-workers can help you de 


cide what areas to study. 

“A lot of times in IT, there 
are a lot of tools available to 
do your job, and the trick is to 
determine which are worth 
using,” says Vince Ryan, a Web 
developer at Upspring Soft- 
ware, part of Morton Kern 
Systems Inc. in Boston. 

Ryan says that although he 
prefers to learn tools indepen- 
dently, he seeks advice from 
his peers to determine where 
to invest his time. Recently, 
such input led him to sign up 
for an XML class. 

In its best sense, feedback 
includes constructive criti- 
cism that helps a worker iden 
tify areas of weakness, techni 
cal or otherwise, to work on 
improving. Those comments 
usually come from a manager, 
and from co-workers only 
when things boil to the point 
of a shouting match. 

But it is possible to get 
those criticisms out of your 
co-workers, if you make clear 
that you’re open to hearing 
such comments. “The more 
interaction you have with peo 
ple, the more comfortable they 
are giving you criticism,” Ryan 
says. Usually, that comfort lev- 
el is heightened by approach 
ing the subject casually, rather 
than formally. 

Instead of striding into a 
co-worker’s cubicle with a 
checklist on which to rate you, 
try having a conversation over 
lunch about your skills, and 
try to draw out the person’s 
opinions about you. 

Dove says that IT managers 
have a responsibility to set up 
opportunities for feedback and 
interaction. He has incorpo- 
rated co-worker input into 
reviews by asking IT employ- 
ees to send him anonymous 
e-mails with comments about 
their peers. 

Dove says he’s found that 
even with anonymity, 80% of 
the comments have been posi- 


| tive, and only 20% have con- 


tained critical advice. Never- 
theless, he and his employees 
say they’ve found the process 
helpful. “People often don’t 


| know what their peers think of | 


them,” Dove says. D 


Bernstein is a freelance writer in 


Watertown, Mass. 
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Getting 
In on the 
360 Review 


Companies with aggressive 
human resources departments 
have adopted the concept of 
the 360-degree review, in 
which co-workers anonymously 
rate each other on a checklist 
of attributes. But if you aren't 
working at a company that 
does that, can you find a way to 
do one yourself? 

Yes, says Ron Dukenski, a 
human resources consultant at 
the Quadrangle Group in New- 
town, Conn. Dukenski prepares 
elaborate peer reviews for 
clients, but he says anyone can 
simulate the effect 

He advises that you seek out 
a trusted co-worker and estab 
lish a contract of sorts, wherein 
you agree to give each other 
ongoing, honest feedback. By 
establishing it as a mutual con 
tract, Dukenski says, you can 
remove the discomfort that 
holds people back from asking 
for, or giving, honest criticism 

The contract can work in 
informal ways, with each part- 
ner commenting whenever he 
has something in mind. Or the 
two can establish a regular pe- 
riodic time - say, over lunch 
every two weeks - to converse. 

The lack of anonymity can 
be a benefit. “I'm not a big be- 
liever in anonymous feedback,” 
Dukenski says. “It doesn't really 
help you interpret where some- 
body is coming from with a 
comment or give you the ability 
to follow up with more ques- 
tions about what they mean.” 

The two contracting workers 
can even seek out checklists of 
employee attributes (easy to 
find on the Web) and rate each 
other from time to time. Even 
better, says Dukenski, is to get 
a description of the criteria your 
manager uses to evaluate per- 
formances and use that 

Finally, Dukenski suggests 
finding at least two contract 
partners: one to judge your 
technical skills and one to eval- 
uate your interpersonal skills. 
It's hard to find one person 
whom you would trust to judge 
you on both, he says. 

- David S. Bernstein 
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FINANCIAL SERVICES 


Information technol- 
ogy is the power 
behind how financial 
services are serving 
their customers, 
opening options on 
how customers can 
check accounts, 
invest money ond: interact with their financial 
consultant. At the same time, IT is driving 
improvements within the financial services 
institutions, from analyzing data to improve 
the capture of dollars to put money into play 
more quickly. 

PricewaterhouseCoopers serves more than 
half the financial services companies listed in the 
Global 500. The firm provides services ranging from 
definition of business processes to IT strategic plan- 
ning to performance improvement. “A lot of our cur- 
rent work involves back office areas,” explains Mark 
Farrington, director of diversity recruitment and 
retention at PwC 

“To meet these client needs, we need people 


business systems,” says Farrington. “We also need 
people who have experience leading and functioning 
as a team player. I'd say 99 percent of our work is 
on projects, and you'll be working on teams that 
involve your colleagues at PwC and the client team. 
Industry experience is great — knowing what is 
driving our clients’ needs so that you will be able to 
add value quickly” 

The firm hires entry-level and experienced 
consultants and tends to develop project managers 
from within the organization. “Geographically, as 
long as you live near an airport, we don't care 
where you live. We have operations throughout the 
world, but the financial hubs tend to be on the East 
Coast and Chicago.” 

Career development is a strength at 
PricewaterhouseCoopers. “We don't have specified 
career tracks,’ says Farrington. “You identify what you 
would call your major — where you want to specialize, 
such as strategic change, customer relationship man- 
agement, financial performance. Then we work to 
position you to work on these types of projects. We 
want you to demonstrate competency for the client's 


EEE 


development, PwC requires 120 hours of training 
over a three-year period. “We are a 
applying organization, so this is part and parcel of 


learning and 


how we operate,” Farrington says 
Farrington says aside from the « 

PwC offers employees a diversity o 

people and organizations to work with. “You have 


areer aspects 


ork and strong 
) and strong 


opportunity to show your stuff here,” he explains 
“Another real plus is the diversity of people who work 
with the firm. We want our firm to look like a United 
Nations because that’s who our clients are — the 
companies that are leading the world” 

To support a diverse population, PwC has affinity 
groups for specific cultural groups. “Often times you 
can come into an organization at orientation a 
a group of new employees who do look like 
but then you may not see anyone who looks 
for another six months. Our affinity groups are 
designed to overcome that situation — answering 
questions from how to deal with a specific issue at 
work to where to get your hair cut. A lot of compa- 
nies hire a diverse population and believe the good 
will survive. At PwC we want more than that for you 
we want you to thrive’ 





For more job opportunities with financial services firms, turn to the 
pages of ITcareers 
© If you'd like to take part in an upcoming ITcareers feature, contact 


who have experience with Oracle, database analysis 
SAP and its financial modules and with business-to- 


where you'll tackle 


benefit and then move you on to the next project 


a bit more” To assist in this 


Janis Crowley, 650.312.0607 or janis_crowley@itcareers.net 
© Produced by Carole R. Hedden 
© Designed by Aldebaran Graphic Solutions 
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United Nations Joint Staff Pension Fund (UNJSPF) 
Information Management Systems Section 


PROGRAMMER ANALYST, P-3, 
New York 


The United Nations Joint Staff Pension Fund (UNJSPF) is 
seeking a professional with demonstrated experience to 
perform the following functions: analyze, design, progr 
implement and document complex data processing s oe 

on an RS/6000 midrange computer system. He/she wi 
responsible for the integration of mainframe and local area 
network applications with the RS/6000. The incumbent wil 
responsible for the Lawson accounting System that utilizes DB2 
for UNIX. He/she will be required to undertake entire projects 
from beginning to end, to provide technical assistance t 
other data processing staff, as well as training to system users 
and to prepare manuals for operations and user staff. The 
incumbent may be required to oversee the work of support 
Staff from time to time 


The ideal candidate would have an advanced university degree in 
mathematics, statistics, data processing or computer science 
a minimum of two to six years of professional experience in 
system design and programming at increased levels of 

responsibility and programme complexity; extensive experi- 
ence in a programming language such as Cobol or C, and/or 





RS/6000 and mainframe computers; experience in SQL with 
RDBMS required. General Accounting knowledge is desirable 
Experience with both large scale general purpose and smaller 
dedicated systems covering varied fields of application and 
data base management; the incumbent should be able to 
prepare written and oral presentations 


Qualified women are encouraged to apply. The United Nations 
offers a competitive benefit package. (Please refer to our 
homepage, www.un.org, for further information.) 


Deadline for applications: 21 July 2001. Detailed curriculum 
vitae including date of birth and nationality should be sent to 
01-D-JSP-001924-E-NY, Staffing Support Section, Office of 
Human Resources Management, Room 2475C, United Nations, 
New York, NY 10017, Fax No: (212) 963-3134, 

E-mail Address: Staffing@un.org. Due to the volume of 
applications, all internal candidates and only those external 
candidates under serious consideration will be acknowledged 
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NEWS. 


Government, Industry Call 
For New Cybercrime Law 


House panel told of need for tougher 
penalties, more aggressive enforcement 


BY PATRICK THIBODEAU 


TOPPING cybercrime 

is going to require 

new laws, more mon- 

ey and legal protec- 

tions for companies 

that share security data with 

the lawmakers 
were told last week. 

During three hearings held 

in the past month, the U.S 

House Subcommittee on 


government, 


Crime heard several ideas for 
cybercrime legislation — in- 
cluding tougher penalties and 
more funding — from govern- 


Continued from page 1 


Access Law 


The U.S. Agency for Interna- 
tional Development has been 
using a combination of manual 
and automated techniques to 
ensure that its 50,000-plus 
Web pages are compliant. The 
agency has taken several steps, 
including modifying large data 
tables to enable them to be 
read with assistive technolo- 
gies and providing training on 
the law’s requirements for em- 
ployees who provide content. 

Among those standing to 
benefit from the law is Beth 
Ostrowski, a federal employee 
who is blind. 

Ostrowski, a manager at the 
Health Care Financing Admin- 
istration, uses a screen reader, 
which converts text to speech, 
to read Web pages. But she 
found that her own agency’s 
Web site, Medicare.gov, origi- 
nally didn’t work well with 


ment officials, trade 
and private companies. 


groups 


Among those calling for ac- 
tion at last week’s final hearing 
Robert Chesnut, a 
president at eBay Inc. in San 
Jose. The online 
wants it to be illegal for spam- 
mers to “harvest” e-mail ad- 


was vice 


auctioneer 


dresses — a “parasitic process” 
that undermines public confi- 
dence in e-commerce, he said. 
“(Individuals constantly] 
come to our site, steal our ad- 
and then those 
e-mail addresses to send illegal 
spam,” said Chesnut. EBay has 


dresses use 


screen-reader software be- 
cause the information couldn't 
be easily translated into a lin- 
ear format. “It had no logic to 
it,” she said. 

That’s been changed, and 
the 


screen-reader 


agency now offers a 
version of 
that’s dynami- 


generated whenever 


Medicare.gov 
cally 
changes are made to the Web 
site. “The webmaster doesn’t 
have to maintain a second ver- 
sion,” said Stephen Jones, a 
project manager at Fairfax, Va.- 
based American Management 
Systems Inc., a supplier of gov- 
ernment procurement and fi- 
nancial management systems. 


Private-Sector Implications 

The impact of the rule on the 
private sector remains to be 
seen, but it could be broad. 

The law “is going to drive 
private-sector behavior,” said 
Greg Pisocky, a business devel- 
opment manager at San Jose- 
based Adobe Systems Inc., 
which has made the latest ver- 


than 29 


tered users. 


more million regis- 
Trade group officials called 
for legislation to protect cor- 
data 
government 


porate security shared 
with 


from public disclosure under 


agencies 


the federal Freedom of Infor- 
mation Act (FOIA). “Compa- 
nies worry that FOIA 
quests for information they 


re- 
have provided to an agency 
could prove embarrassing or 
costly,” Miller, 
president of the Information 


said Harris 


Technology Association of 
America in Arlington, Va. 

Sen. Bennett (R- 
Utah) is expected to introduce 
legislation that would provide 
an FOIA exemption to corpo- 
rate data. In the 


Robert 


security 
sion of Acrobat software ac- 
cessible to the disabled. “Al- 
we are not designing 
products exclusively the 
government, we are attempt- 


though 
for 


ing to make this very large cus- 
tomer of ours satisfied, and as 
a result, the ancillary benefits 
will be derived by our com- 
mercial customers.” 

rhe private-sector Web sites 
that aren’t accessible are miss- 
ing out on business, said Os- 
trowski. “The more accessible 
the site is, the more business 
sense it makes,” she said. 

Although the 
goals of the law have been 


merits and 
widely praised, trade groups 
are concerned that the law’s 
requirements don’t give ven- 
dors clear guidance in meeting 
the rules. “My worst-case fear 
is there is arbitrary dropping 
of products because they are 
not 100% 
Bartlett Cleland, a vice presi- 
dent at the Information Tech- 


compliant,” said 


nology Association of America 
in Arlington, Va.B 


House, Reps. Tom Davis (R- 
Va.) and James Moran (D-Va.) 
last year co-sponsored similar 
The House and 
Senate bills are expected to be 
introduced before 
takes its August recess, accord- 


legislation. 
Congress 


ing to congressional sources. 
Those representing business 
interests emphasized that law 
enforcers have to move aggres- 
sively, particularly in intellec- 
tual property protection. 
“Criminal prosecution and 
penalties provide deterrence 
in a way that civil judgments 
cannot,” said Bob Kruger, a 
vice president at the Business 
Software Alliance in Washing- 
ton. He added that piracy costs 
some $11.75 billion annually. 
There has been progress in 


61 


Cyberlaw Upgrade 


The Bush administration 
wants Congress to make it 
easier to track cybercriminals. 
Trap and trace: officials 
want to ensure that laws 


used to trace phone calls ap- 
ply to computer networks. 


A law 
that would let a judge autho- 
rize a signal trace extending 
over many jurisdictions. 


stepping up the pace of prose- 
cutions, but a sustained effort 
is needed, Kruger said. “Pirates 
need to know that they stand 
to lose not just money but also 
their liberty,” he said 

Rep. Lama Smith (R-Texas), 
the committee chairman, said 
many laws haven't been updat 
ed to reflect new technologies 
since the mid-1980s. “We hope 
that these hearings will result 


in some legislation,” he said. D 


Timberland Taps High-Tech 
Vet Brigham as Its New CIO 


BY CAROL SLIWA 
Seeking to tap his strong oper- 
ational background, The Tim- 
berland Co. has named Steven 
Brigham as its new CIO. 
Brigham 
Akyuz, who left in November 
to become CIO at The Stride 
Rite Corp. in Lexington, Mass. 
Brigham, who joins Timber- 
land from a high-tech firm, told 
Computerworld that he will be 
working to develop a global IT 
strategy for the Stratham, N.H.- 
based footwear and apparel 
manufacturer and a retailer. 
“The IT architecture 
rently is a best-of-breed strate- 


succeeds 


cur- 


gy, and we’re trying to deter- 
mine what the best invest- 
ments are going forward,” 
Brigham said, adding that Tim- 
berland is “definitely going to 


Yusef 


simplify and leverage our cur- 
rent investments.” 

Right now, Timberland has 
multiple homegrown and “no- 
name-brand” enterprise re- 
source planning systems, as 
well as “a myriad of other ap- 
plications” from smaller appl 
cation vendors running on its 
Unix and IBM AS/400 systems 
It also uses soft- 
Rockville, Md.- 


based Manugistics Group Inc 


1am said 
ware from 
for its supply chain operations. 
Brigham joins Timberland 


from Adaptive Broadband 
Corp., where he served as CIO 
and vice president of supply 
chain operations. The Sunny- 
vale, Calif.-based 


working company last month 


data net- 


announced plans to reduce its 
workforce by 60%. D 
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S/FRANKLY 


Counting Casualties 


O HOW BAD is 
reader 


the Great Dot-Com Die-Off? That’s 
asked me in March. We all know that lots of Inter- 


what a 


net-related businesses have shut their doors in the past 

year. We’ve heard about the layoffs, the inability to get 

another round of funding, the ripple effect of abandoned 
office leases and downward pressure on IT-shop salaries. 

But how bad is it? The 95% death rate predicted by Gartner Inc. 
President Michael Fleisher last year? Or the 5% counted by San 
Francisco research firm Webmergers Inc.? 

Just how much of the sky has fallen, anyhow? 


Answer: Plenty. And more of it is falling every 
month 
Never mind Ga 


Fleisher speculated last year that 95‘ 


Vhen 


to 98% of 


rtner’s guesstimate. 


all dot-coms would be pushing up daisies by the 


spring of 2002, he had no numbers backing him 


up — just a firm belief that what he called “Old 
Economy concepts” would emerge triumphant 
over a bunch of twentysomethings playing ait 
hockey and doing business without a realistic 
profit model 
He had no numbers. I finally found some 
According to Webmergers, at least 493 “sub- 
stantial” Internet companies have gone belly-up 
since January 2000. That word substantial is 
important. Webmergers counts only companies 
that went public or got at least $1 million from 
venture capital firms or angel investors. By 
Webmergers’ reckoning, that leaves between 
7,000 and 10,000 substantial dot-coms still alive. 
That doesn’t sound too bad, does it? A 500-in 
10,000 mortality rate is only 5% 
hoohah about a die-off? 
Because that’s not all. Along with the official 
dead, Webmergers counts more than 1,500 


. So why all the 


mergers and acquisitions since the 
beginning of last year. 
Think 


of a dic 


those don’t count as part 
-off? Think again. Most of 
those companies had to be ac 
quired. They had run out of fund- 
ing. Their oxygen was cut off. 

They co 1't survive on their 
own. And t 


those dot-coms were acquired by 


he vast majority of 
other dot-coms — some of which 
were themselves acquired or put 
out of their misery. 

Result: The real death rate among 
substantial dot-coms over the past 
year has been about 20%. 


FRANK HAYES, 
Computerworld's senior 
news columnist, has covered 
IT for more than 20 years. 
Contact him at 
frank_hayes@computerworld.com. 


And they’re still dying. Another 2% of them 


disappear every month — about 50 closures and 
120 or so mergers. 

And the ones that haven't died yet are gasp- 
ing for air, with layoffs and spending « “uth: icks. 

And re aie r, this is the cream. These are 
the companies whose ideas and proposals were 
so good that they got a million dollars of other 
people’s money. The rest of the dot-coms — the 
ones that never made a successful million-dol- 
lar pitch — are dying, too. We just don’t know 
how much worse off they are. 

Should this worry people in corporate IT 
shops? Yes. 

We should worry about the products and 
services we'll never get from the companies 
that dropped dead. We should also worry about 
the products and services that big vendors may 
never offer us now that a big, free-spending part 
of their market has dried up. 

We should worry about the people shed by 
those dead and dying dot-coms. We'll hire some 
of them, and we’ll have to deal with their whip- 
sawed expectations. We should also worry 
about our own best people, whose loyalty in 
sticking with us will be hard to re- 
ward with our own tight budgets. 

Most of all, though, we should 
worry about the 80% or 70% or 
60% of top dot-coms that will 
survive the die-off. The ones that 
make it will be lean, focused and 
deadly serious. They won't be 
playing air hockey. They'll be 
doing cutthroat, hard-edged busi- 
ness — the way you learn to do it 
only when you've faced death and 
survived. 


well, then we'll really have some- 


' 

i 

And if they’re our competitors — 
j 

thing to worry about. D 


NEW AND COMPLETELY 


nexperienced IT manager take 


fish in. She takes one look at an 


rot where the equip 


“What a 


empty sf 


thought you said we 
+ a wn T 

t any longer 

and there were onl 


r ned into it” 
plugged into i 


NEW APPLICATION runs 


omme}’rce 


dilot fish. Make 


) that site at one time.” 
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Y¥2K PLUS 17 MONTHS Hos 
pital’s new Nortel router goes live 
in May 2001. Pilot fish is double 

g everything when he 
happens to notice the revision 
information in the router's firrr 
ware. Date on the latest versior 
)f the code: 10/18/100 


VALUE ADD One aneanes 
sole task is to cut and paste 
how-to tips from about a dozen 
newsletters into a Web-based 
database for internal use. IT pilot 
fish suggests he could automate 
the process, which would retain 
the original HTML formatting 

0 let the employee 
escape the tedium of all that 
ing and past ee Boss de 

“But | think the 
utter-and-paster got the hint 

that she wasn't adding value,” 

fish says. “She's now using a 


erif fon it instead of her old 


clines the offe 


space 


Add some value: sharky@ 
computerworld.com. You get 
a stylish Shark shirt if your true 
tale of IT life sees print - or if it 
shows up in the daily feed at 
computerworld.com/sharky 
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Get Sprint Global Data Solutions™ 
ce 


oe 


For performance, reliability, and customer support, Sprint can help reduce your worries. 


With so much riding on a network's performance, only The self-healing SONET technology of the Sprint network, 
a communications company familiar with implementing with fewer network outages thar: other major carriers, 
and managing sophisticated networks should even provides your network with increased survivability. 


be considered 
That, combined with some of the most comprehensive 


With Sprint, you get high-performance WAN and Internet service level agreements in the industry, fortifies our 
solutions for your domestic and international needs commitment to network performance and quality 
that you can both rely on and build upon, with new customer service 
e-business applications. Sprint Global Data products 

ne y Want in-depth information to feel even more secure? 
and services heip you leverage your existing technology 
or migrate to more advanced data solutions to keep Visit www.sprintbiz.com/data_solutions 
your mission-critical data flowing freely (and securely) or call 1 877 203-7263 
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